v4.2.0

• A webhook you have switched off no longer has to have a URL ([#35]). Half-prepared
  notification targets are kept as drafts; only an active one triggers validation.
• Webhooks can carry extra headers ([#34]), so targets that need more than one — like
  Nextcloud Talk, which wants OCS-APIRequest and Accept alongside its authorisation.
• Password managers can fill the login form again ([#26]). The sign-in page is a real
  form with a username field, which is what a manager's inline autofill keys on; the token
  and password fields in Settings are marked so it leaves them alone.
• Successful self-tests can be kept out of the event log ([#28]) without testing the
  credentials any less often. Failures, recoveries and "Test now" always report.

Full changelog: https://github.com/ffind-dev/pve-ups/blob/v4.2.0/CHANGELOG.md