v2.7.0

2.7.0 (2026-09-11)

Added

• add Dallas, Fulton, Travis service areas to county dropdown (26d644d)
• orders: admin email notification on every order created (a734584)

Fixed

• driver: auto-resume web GPS tracking on any page while a shift is active (f5b4760)
• driver: auto-resume web GPS tracking on any page while a shift is active (9fb2049)
• driver: require an active shift before advancing a delivery (c786820)
• driver: require an active shift before advancing a delivery (55220ee)
• driver: treat a paused shift consistently in the delivery shift gate (1450fb1)
• forms: centralise site origin and surface silent email failures (a2f1564)
• forms: centralise site origin and surface silent email failures (c98eba2)
• tracking: make shift start idempotent and enforce one active shift per driver (8dc289f)
• tracking: make shift start idempotent and enforce one active shift per driver (752318d)

Security

• api: remove unauthenticated /api/download path traversal route (8bd1ad6)
• api: require auth on dispatch, pricing, upload and admin routes (8ded4e0)
• deps: patch two critical Next.js advisories (0f76cac)

Documentation

• deployment: backup and restore runbook (688241a)