v2.4.1

Bug fixes

• Guests can now view members of public groups. GET /api/social-group-members was returning 401 for guests on public groups because the resource scope called assertRegistered() before the visibility check. Registration is no longer required to list a public group's members; private groups still return 403 for non-members.
• Group avatar color disc now only paints behind the initial-letter fallback, never behind an uploaded icon image (previously the disc could bleed through transparent-PNG logos).

Full Changelog: v2.4.0...v2.4.1