v5.6.0

5.6.0 (2026-08-26)

🍕 Features

• api: fail-closed management authentication with transport gate (6c80c7c)
• config: first-boot credential seeds with validation (1d0bfb9)
• ota: signed firmware verification and hardened upload lifecycle (9f84a42)

🐛 Bug Fixes

• ci: bump deprecated GitHub Actions in release job (fe7947d)
• utilities: device ID generation, scan index, and RSSI guards (6e943a2)
• wifi: unique observer IDs, event teardown, and adhoc wiring (42d0630)
• config: versioned snapshot persistence with strict validation (8a1b718)

📝 Documentation

• examples: align examples with provisioning contract (183ece8)
• document security model, provisioning, and limitations (b3c6384)

🎨 Styles

• ci: normalize release.yml to LF line endings (0619fb5)

🧑‍💻 Code Refactoring

• wifi: event-driven connection state machine driven by loop() (86555e7)

🔁 Continuous Integration

• add workflow_dispatch so CI and Release can be retriggered (9014b0c)
• firmware matrix, native tests, UI hygiene, release gate (6cef720)
• retrigger workflows after missed push event (1e67f44)

---

This release is also available on:

• v5.6.0