Production candidate f5c6a06411a1

What's Changed

• refactor(api): decouple form validation from applications service (H12, H19) by @danicallero in #1147
• fix(diary): combined tags and latest badge assignment (#935, H22, H23) by @danicallero in #1149
• refactor(wallet): break settings/provider/sync import cycle (H28) by @danicallero in #1148
• release: promote staging badge fixes and architecture refactors (H12, H19, H22, H23, H28) by @danicallero in #1150

Full Changelog: release-b28bfe0503b6...release-f5c6a06411a1

Production candidate c10dfb8f8ea9

What's Changed

• fix(deploy): backup.sh reads deployed image tags (#539) by @danicallero in #1161

Full Changelog: release-6b751faa5f60...release-c10dfb8f8ea9

Production candidate c0003fc80939

What's Changed

• refactor(web): correct shared route and model/UI ownership (#1145) by @danicallero in #1154

Full Changelog: release-f5c6a06411a1...release-c0003fc80939

Production candidate 8170052d744d

What's Changed

• fix(deploy): make S3 backups work on the host (#539) by @danicallero in #1162
• release: promote S3 backup fixes for the host (#539) by @danicallero in #1163

Full Changelog: release-c10dfb8f8ea9...release-8170052d744d

Production candidate 6b751faa5f60

What's Changed

• refactor(mobile): share Live Activity layout pieces through a serialized kit (#1134) by @danicallero in #1151
• feat(deploy): back up to AWS S3 (#539) by @danicallero in #1152
• feat(maintenance): restore lock and waiting screens (#539) by @danicallero in #1153
• feat(deploy): restore, rollback and drill for S3 backups (#539) by @danicallero in #1155
• feat(deploy): production-only backups, latest file version only (#539) by @danicallero in #1157
• release: promote S3 backups, restore lock and rollback tooling (#539) by @danicallero in #1158
• fix(web): keep maintenance store React-free so the web image builds (#539) by @danicallero in #1159
• release: promote staging web build fix for the maintenance gate (#539) by @danicallero in #1160

Full Changelog: release-c0003fc80939...release-6b751faa5f60

Production candidate ffb756ee3796

What's Changed

• chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.4.1 by @dependabot[bot] in #1129

New Contributors

• @dependabot[bot] made their first contribution in #1129

Full Changelog: release-517f492bed04...release-ffb756ee3796

Production candidate df2a8335c2bf

What's Changed

• feat(profile): section navigation with the Wallet inside the profile (H28, #1083) by @danicallero in #1094
• feat(certificates): configurable issuance, attendance review and guest register (#1083) by @danicallero in #1084
• fix(exports): CSV field keys and grouped field selection (H54, H56) by @danicallero in #1095
• feat(certificates): single stored copy, per-type requirements and clearer UX (#1083) by @danicallero in #1096
• feat(certificates): verify by PDF fingerprint, mobile download and compact SHA bar (#1083) by @danicallero in #1097
• fix(schema): remove stale integration comment (#1005) by @danicallero in #1098
• fix(mobile): upload account photo and CV as File parts (#1046) by @danicallero in #1099
• fix(seed): restore mock fixtures and audit test coverage (#1021) by @danicallero in #1100
• perf(api): remove N+1 queries and speed up judge panel actions (#1083) by @danicallero in #1101
• fix(queue): requeue to top goes behind the head (H33, H37) by @danicallero in #1102
• fix(certificates): read university from the application answer, drop users.university_id (H12, H54) by @danicallero in #1103
• feat(web): one sticky public top bar and footer; /horario folds into /timetable by @danicallero in #1104
• chore: promote staging to main by @danicallero in #1105

Full Changelog: release-6d5cc1471c67...release-df2a8335c2bf

Production candidate cdb95a745955

What's Changed

• fix(web): public top bar fits on mobile by @danicallero in #1106
• feat(applications): configurable minimum age on birth year by @danicallero in #1107
• chore: promote mobile header and minimum-age fixes (H11, H12) by @danicallero in #1109

Full Changelog: release-df2a8335c2bf...release-cdb95a745955

Production candidate b28bfe0503b6

What's Changed

• refactor(web): share enterprise form sections (#1135) by @danicallero in #1136
• refactor: deduplicate wallet bookkeeping and judging fixtures (#1135) by @danicallero in #1138
• ci: bump GitHub Actions (checkout 7, login 4, build-push 7) and group Dependabot on staging by @danicallero in #1137
• test(api): extract shared integration test setup into useTestApp (#1133) by @danicallero in #1139
• refactor(mobile): deduplicate form modals (Part of #1134) by @danicallero in #1140
• refactor: hoist object-literal default params (S7737) by @danicallero in #1142
• chore: promote dedup refactors, default-param cleanup and Actions bumps (#1120, #1133-#1135) by @danicallero in #1141

Full Changelog: release-ffb756ee3796...release-b28bfe0503b6

Production candidate 517f492bed04

What's Changed

• fix(mobile): recover Android release build memory limits (N/A) by @danicallero in #1108
• docs(mobile): explain why live-updates has no Gradle lockfile (#1116) by @danicallero in #1121
• style: apply low-risk Sonar cleanups (#1120) by @danicallero in #1123
• ci: freeze web lockfile, pin Docker/Tailscale actions, scope permissions (#1111, #1112) by @danicallero in #1122
• fix(web): handle brand mark and schedule owner failures (#1114, #1118) by @danicallero in #1124
• fix(api): assert admission order; portable event-day fixture path (#1113, #1115) by @danicallero in #1126
• fix: locale-aware filter sorting and dead sign-out branches (#1117, #1119) by @danicallero in #1125
• fix(applications): bound email/url validation regexes (#1110) by @danicallero in #1127
• chore: promote Sonar triage fixes and Android build fix (#1110-#1120) by @danicallero in #1128

Full Changelog: release-cdb95a745955...release-517f492bed04