v0.4.8

0.4.8 (2026-07-12)

Bug Fixes

• api: bound message attachment asset IDs (#1458) (f22b343)
• auth: keep provider redirects credential-free (#1437) (e9c5ebf)
• auth: preserve sessions during storage outages (#1431) (3442f8a)
• auth: throttle password reset requests (#1441) (67dd1dc)
• backup: harden archive creation and restore (#1435) (d07672c)
• cli: require explicit passphrase sources (#1451) (6b8b24e)
• frontend: embed main build version (#1463) (21a20a8)
• frontend: label deleted users consistently (#1452) (8e04235)
• release: publish sortable main image tags (030db55)
• security: harden realtime auth and request handling (#1433) (75c5a24)
• security: require explicit proxy trust (#1447) (234862f)
• tls: secure autocert cache permissions (#1461) (cef9d29)