Pappice v0.15.0

Pappice v0.15.0 adds internal contributors and safer integration retries, with authentication, attachment, restore, and UI fixes.

• Add the Internal contributor product role for staff who can read and add
  internal notes without sending public replies or editing tickets.
• Support idempotency keys for ticket updates and comments, and stable webhook
  delivery IDs so integrations can safely deduplicate retries.
• Run webhook delivery independently of event projection, and bound SMTP sends
  with timeouts and context cancellation.
• Reject cross-site session creation requests and apply login rate limits
  consistently across equivalent email address formats.
• Keep concurrent attachment uploads independent during cleanup, and roll back
  failed restores while preserving originals beside their destinations.
• Show storage usage in maintenance, fix mobile settings scrolling, and remove
  the duplicate Add Member action from an empty product member list.
• Include access permissions, integration guidance, and the security policy in
  release archives.

Upgrading from v0.14.0 requires schema migration 8. Back up the database and
uploads, stop Pappice, then use the updated binary with the existing storage
configuration to run pappice db migrate --dry-run and pappice db migrate
before restarting. The migration adds webhook delivery IDs and the ticket
idempotency-key table; it preserves queued notifications and their states.

Linux amd64 and arm64 archives are attached, each with a SHA-256 checksum.

Upgrade guide · Access permissions · API and webhook integration guide

Full changelog