9.8.0

• 🚀 [CORE] Detect SemVer diff behind floating tags using OCI version metadata (closes #1502)
• 🚀 [TRIGGER] Add XMPP trigger to send update notifications via XMPP/Jabber chat messages (the transitive sasl-scram-sha-1 dependency is pinned to 1.3.0 with an npm override because 1.4.0 breaks SCRAM-SHA-1 authentication with @xmpp/client, see xmppjs/xmpp.js#1127; drop the override once @xmpp/sasl supports async SASL mechanisms)
• 🚀 [TRIGGER] Support rollback notifications in the XMPP trigger
• 🚀 [WATCHER] Configure Docker digest watching centrally per container name with CONTAINERDIGESTS, preserving label precedence and existing defaults.
• 🐛 [AUTH] Support customizable ID token signature algorithm (e.g. ES256 with Authentik) (fixes #332)
• 🐛 [CORE] Increase EventEmitter maxListeners to avoid memory leak warning with many triggers (#306)
• 🐛 [REGISTRY] Fix Docker pull authentication failure on AWS private ECR registries (fixes #726)
• 🐛 [REGISTRY] Fix resolution of OCI manifests missing mediaType property in payload (fixes #1530)
• 🐛 [REGISTRY] Mask proxy credentials in registry configurations
• 🐛 [REGISTRY] Support Bearer token authentication for Alibaba ACR (fixes #1519)
• 🐛 [TRIGGER] Always close the XMPP connection when sending a message fails
• 🐛 [TRIGGER] Fail fast when the XMPP server is unreachable instead of hanging forever (new WUD_TRIGGER_XMPP_{trigger_name}_TIMEOUT option)
• 🐛 [TRIGGER] Fix Apprise batch notifications when using persistent config/tag (#582)
• 🐛 [TRIGGER] Fix Windows path separator normalization for docker-compose trigger path mapping (#1527)
• 🐛 [TRIGGER] Mask proxy credentials in HTTP trigger configurations
• 🐛 [TRIGGER] Prevent MQTT trigger from crashing process when broker is disconnected (fixes #1520)
• 🐛 [WATCHER] Ignore Docker temporary recreate container rename events (#539, #294)