updates

security: Pin libpcre2-8-0 to patched version to fix CVE vulnerabilities

Explicitly install libpcre2-8-0=10.42-1+deb12u1 to resolve HIGH severity CVEs:
- CVE-2026-86145: Out-of-bounds write allows arbitrary code execution
- CVE-2026-89157: Out-of-bounds write via large pattern input
- CVE-2026-89161: Memory corruption in pcre2_jit_match

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

v0.7.0

Changelog

• c0b659e Add authenticated backup verification metadata
• fe062dd Add control plane disaster recovery inventory
• b8b0aca Add database restore to staging
• 755d324 Add developer environment and account lifecycle controls
• 46d3618 Add developer runtime and build runner workflows
• aa54fee Add enforceable site resource profiles
• bd18c9d Add human-readable API guide
• 3584bde Add managed database staging clones
• 3c8eed5 Add offsite database restore
• c742a9d Add offsite restore to staging
• 073a6ff Add operator version command
• 04eb33b Add opt-in filesystem quota enforcement
• 3c83479 Add preview build to release pipeline
• a4a845c Add private Git deploy keys and scheduled tasks
• 9f4fe9a Add protected staging routes
• 90da502 Add read-only host security center
• 132f87c Add shared hosting workspace foundation
• f9a6324 Add transactional customer account updates
• ea7822e Add upgrade and destructive recovery gates
• 86fceb9 Add verified files-only backup restore
• 1b7b100 Add verified managed database restore
• d7bac35 Add verified offsite file restore
• 1a2d303 Align database staging documentation
• 1ad0a44 Align installation smoke with production backup policy
• 7d73c5a Align release retention documentation
• 2ee9dfe Align route lock identities
• 0fcce59 Apply SSH access policy through host helper
• d7fbb1e Apply resource reconciliation to account updates
• e27cdbb Apply runtime image security updates
• 0486de8 Authorize staging restore backup source
• 0d4fd23 Automate Git release retention and helper allowlists
• d24b876 Bound CI test concurrency
• 796f408 Bound scheduled tasks and fix worker lifecycle
• 077ab20 Clarify backup restore availability
• f2f497b Clarify filesystem quota boundaries
• f1900b3 Clarify webserver-specific WAF support
• 5d351c4 Close production readiness audit gaps
• f0533e7 Close production-readiness audit gaps and finish the security-header/permission fixes
• 4f3da0f Complete production architecture controls
• ce8702e Correlate release pipeline stages
• 872685e Define DNS provider and optional mail boundaries
• eee3d65 Define disaster recovery objectives
• afde03f Document SSH access API contract
• 4909b97 Document complete restore surface
• 17231af Document customer account update workflow
• 831782f Document developer controls and webhook APIs
• d6428cc Document developer workflows and add preview
• a02fb16 Document mandatory production encryption keys
• 1156f06 Document production architecture checkpoint
• c4c14d3 Document staging database restore status
• 9ab4f5e Enforce aggregate account resource limits
• 7911be2 Enforce built-in hosting plan resources
• b4dd464 Enforce exclusive site ownership
• 9972b84 Enforce production state integrity requirements
• bcce555 Enforce resource ceilings on site edits
• 0139987 Enforce site limits in build runner
• ca98b1e Enforce staging authentication in Caddy
• b8c597e Exercise failure recovery boundaries
• ce615d8 Expand installation smoke coverage
• 0784e5f Extract authentication policy seam
• 2de645d Extract deployment state behind internal package
• cfd65f1 Extract session registry behind internal package
• fedc0ff Extract site operation locks package
• 698cbcd Extract site usage package
• 5235812 Fix Terraform CI formatting
• 821f2ff Fix production container smoke configuration
• faef180 Fix production smoke test credentials
• 1aa1cfd Fix self-matching regex in release toolchain pin guard
• 7aa02a4 Guard release toolchain pinning
• 113c41c Harden backup and authentication validation
• b1a96fe Harden control-plane state and dashboard
• 7bb09a0 Harden deployment acceptance checks
• 13afecd Harden filesystem path handling
• 35a19aa Harden local validation and privileged helper paths
• 564d6ef Harden private Git clone destination validation
• d0aa518 Harden private Git host verification
• 65fa96f Harden production deployment readiness
• 66b6ef5 Harden resource state reconciliation
• c752b88 Install rclone in smoke hosts
• 1a8f300 Keep resource desired state recoverable after write failures
• a96c8ea Limit race test runtime threads
• 19f795b Make cPanel restores retry safe
• c0961f7 Make executable security test runner-independent
• 176095d Make process death recovery test coverage-safe
• e0f7b77 Make recovery test process launch portable
• 7d686f9 Polish profile bio for hiring presentation
• 1dc124d Prepare v0.7.0 production release
• 8295b53 Preserve task state when deletion persistence fails
• 6357b70 Prevent environment deletion state drift
• 61310bb Propagate site resource limits to scheduled tasks
• 799edbd Protect staging routes from indexing
• 876545c Provide control plane path in production smoke test
• 8634570 Publish materialized durable jobs atomically
• 43934b6 Reconcile PHP runtime profiles
• 0faaa97 Reconcile Python application deployment
• b1913bb Reconcile desired resource profiles
• fea39e9 Reconcile documentation and pin release tooling
• 6b737de Reconcile filesystem quota removal
• 65b0f41 Reconcile resource documentation status
• 042f8d4 Reconcile resource enforcement during startup
• 31721b7 Reconcile resources when account plans change
• 045d7c7 Reconcile restore documentation
• 47389f1 Reconcile worker lifecycle state
• d522642 Record extracted control plane package seams
• d87b6e1 Refine project architecture and presentation
• 891e2c0 Refresh dashboard workspace preview
• 090d654 Release SQLite rows before refreshing durable jobs
• a22fd8a Remove runner-dependent recovery test process
• 034e97b Replace legacy dashboard preview asset
• 09a7ff0 Report live resource and site usage
• cf90211 Restore green repository checks
• b731e19 Restore verified backups to staging
• a839081 Retain bounded Git rollback releases
• 9a8918d Revoke customer sessions on suspension
• 7588fe1 Rollback resource state when persistence fails
• 28423b6 Rollback staging side effects on failure
• 90b3b73 Separate durable job snapshots from shared state
• ebf6b76 Serialize Git rollback per site
• b9af531 Serialize all site mutations
• 76f99da Serial...

v0.6.0

Changelog

• 82b814b Add PostgreSQL and database administration support
• ed83ce6 Add constrained Git site deployments
• fb5baff Add customer-first hosting workspace
• 0b45f05 Add production database operations
• b735ac3 Add site details and Git rollback
• bf9ae9c Add site-centric developer workspace
• ee7d372 Add verified audit event history
• 73517be Bump version to 0.5.0
• d35e2a3 Complete production readiness audit hardening
• 98fc641 Document architecture and automate releases
• 4bfe471 Document package boundary roadmap and release milestone
• e1ff23b Fix Terraform environment block syntax
• f17b187 Fix audit findings and harden restore paths
• 459c751 Harden Git deployments and site inventory
• 97ced7e Harden database operations for production
• f7e41a4 Harden operations and update production documentation
• 0b7e352 Harden production deployment and operations
• 7550514 Harden production deployment and restore admission
• 9db6656 Make Caddy the default webserver
• 4720824 Refresh 0.5.0 dashboard documentation preview
• f810d6c Synchronize documentation with current panel

v0.4.0

StePanel v0.4.0

v0.1.0

StePanel v0.1.0