v2.2.1

2.2.1 (2026-06-12)

Fixed

• accept profile_id linkage in driver ownership checks (8670e76)
• backfill and sync the drivers auth-link columns (1c5da15)
• driver "Access denied" — ownership via profile_id linkage + tracking authz hardening (397ea96)
• keep the POD sheet open on failed status update; de-dupe banner keys (c028a50)
• surface delivery status-update failures in the driver tracking UI (0435f37)

Security

• harden tracking authz paths from pre-landing review findings (23c1486)
• require caller ownership in driver tracking server actions (83e54db)
• validate delivery status server-side and make completion idempotent (7058069)

Documentation

• changelog entry for the driver ownership/authz overhaul (8d4ee73)
• document the driver-ownership authz module and server-action auth convention (420d36f)