v2.1.1

Changed

• Production and development dependencies refreshed across the board (aiogram, django-ninja-extra, django-simple-history, django-unfold, the OpenTelemetry stack, pillow-heif, prometheus-client, uvicorn, and the test toolchain). requests is now declared explicitly instead of relying on a transitive pull. stripe is pinned <15 and django-ninja-jwt <5.4.5 until their breaking changes are handled in dedicated migrations
• Seeded organizations now get deterministic placeholder logos, so seeded and demo instances render with real imagery instead of blank avatars

Security

• h2 floor raised to 4.4.1 (CVE-2026-71554), patching the HTTP/2 client stack used for outbound requests

---

What's Changed

• feat(seed): deterministic poster-palette logos for all seeded organizations by @biagiodistefano in #852
• chore: trim derivable sections from CLAUDE.md; fix tos.md gitignore entry by @biagiodistefano in #853
• chore(deps): bump prod+dev deps; declare requests; cap stripe<15 and ninja-jwt<5.4.5 by @biagiodistefano in #854
• chore(ci): make codecov patch status informational by @biagiodistefano in #855
• fix(deps): bump h2 to 4.4.1 for CVE-2026-71554 by @biagiodistefano in #857
• chore(release): v2.1.1 by @biagiodistefano in #858

Full Changelog: v2.1.0...v2.1.1