0.11.1

Added

• 36dfedc Add explicit CLI overrides for disabling configured debug logging, issue and time display, remembered state, user discovery, secret feedback, mock mode, and power-command isolation.
• f641dd0 Add configurable login prompt titles with hostname-based, custom, and hidden modes.
• 75efc5d Add an administrator-configured default username without requiring user enumeration or remembered state.
• 83c410f Add optional quiet session launch, discarding the authenticated session's standard output and error.
• 5943e28 Add non-fatal Num Lock activation for Linux virtual consoles.
• b639688 Add battery status, configurable time and status-bar placement, and independent responsive controls for every status item.

Changed

• 761b674 Keep configuration reload work off the async runtime and coalesce rapid updates to the latest bounded revision.
• dcff56d Calculate compatible multi-battery percentages from summed current and full capacities instead of averaging percentages.
• 44f7423 Cache static greeting, title, and status data and sample Caps Lock only when visible, reducing work during screen refreshes.

Fixed

• 533fa6a Expand /etc/issue with a single-pass agetty-compatible subset, including \S{PRETTY_NAME}, and avoid an extra blank line before the prompt.
• 7c5f23a Prevent an option missing its required value from consuming the valid option that follows it.
• 6ec4718 Apply standard XDG session paths for empty variables and reject malformed Desktop Entry groups, keys, locales, duplicates, and control characters.
• 3534cf5 Reject NUL-containing commands, wrappers, environment entries, and usernames without erasing valid lower-priority configuration.
• 4635e8b Write successful --help output to standard output while keeping diagnostics on standard error.
• 85e4c5f Evaluate session TryExec availability using the greeter's effective execution permissions.
• 0339386 Reclaim the battery row when no battery is available and suppress stale battery data after the widget is disabled.

Security

• 4e5418a Redact PAM messages and greetd error descriptions from persistent debug logs.
• 3f7c9ff Enforce an 8 MiB limit on incoming and outgoing greetd IPC frames before allocating or writing their bodies.
• 177b224 Read configuration through one bounded regular-file transaction and warn about unsafe ownership, modes, ancestors, or replacement paths.