Release v1.3.5

• Added
  • Pre-start environment check for Compose.
  • The container generates and persists its own session key.
  • Admin comment management, with deletion of comments and replies.
  • Configurable session lifetime.
• Fixed
  • SQLite restore validates before replacing the live database, and is mutually exclusive across processes.
  • Site settings read and written as a single row.
  • Expired rate-limit rows are cleaned up.
  • Search keywords match literally.
  • The database init script is safe to re-run.
  • Profile links reject pseudo-schemes.
  • Backup and restore work with newer database clients.
  • Missing images fall back to built-in placeholders.
  • Search row layout in the collapsed mobile menu.
  • The theme switcher works on touch again.
  • Admin breadcrumbs show their sidebar group.
  • The reverse proxy no longer advertises its version.
• Improved
  • Database image upgraded to 8.4; existing accounts keep authenticating.
  • Unused config removed.
  • Workflow dependencies pinned to fixed versions; code security scanning added.
  • Quality gate adds type checks, format checks and dependency-consistency checks.
  • Vulnerability scanning blocks the build on the main branch and the scheduled run.
  • Dependencies with known vulnerabilities upgraded.