ProPR v0.9.1

What's Changed

• ci(release): raise release validation timeout to 150 minutes by @integry in #3396
• [3403 by Claude Opus 5.5] Fix the new blocking dependency advisory GHSA-g3hv-75wg-m249 (minimatch < 11.0.1, moderate: denial of service via globparts amplification; published 2026-10-30T23:09Z, patched only in minimatch 11.0.1, with no 10.x or 3.x backports). Check current... by @propr-dev[bot] in #3404
• chore(deps): bump joi from 17.13.8 to 17.13.9 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in #3397
• [3400 by Claude Opus 5.5] Fix #3399: the published agent image cannot be unpacked on hosts that cannot apply overlayfs opaque whiteouts (reported on OrbStack, Ubuntu 24.04.5 x86_64, Docker 29.1.3 with the containerd overlayfs image store: `failed to convert whiteout file... by @propr-dev[bot] in #3402
• [3405 by Claude Opus 5.5] Fix demo mode for the 0.9.0 instance access model: demo.propr.dev (ProPR 0.9.0, PROPR_DEMO_MODE=true, read-only) hides whole product areas from the demo visitor. Check current upstream main first. by @propr-dev[bot] in #3406
• [3408 by Claude Opus 5.5] Automate the hosted UI (app.propr.dev) deployment for releases. Check current upstream main first. by @propr-dev[bot] in #3409
• [3407 by Claude Opus 5.5] Add a macOS unsigned preview release flow for the desktop app, so ProPR Desktop for macOS can be distributed without a paid Apple Developer account. Check current upstream main first. by @propr-dev[bot] in #3410
• [3413 by Claude Opus 5.5] Prepare the ProPR 0.9.1 patch release metadata on main (currently ac32c2a). Check current upstream main first. Metadata only: no behaviour changes. by @propr-dev[bot] in #3414
• [3415 by Claude Opus 5.5] Update the agent CLIs bundled in the propr/agent image for the 0.9.1 release, on main (currently 2ee3573, the 0.9.1 release prep). Check current upstream main first. by @propr-dev[bot] in #3416

Full Changelog: v0.9.0...v0.9.1