Release v2.4.2

What's Changed

• build(deps): Bump the pip group across 2 directories with 1 update by @dependabot[bot] in #25

Full Changelog: v2.4.1...v2.4.2

Release v2.4.1

What's Changed

• build(deps): Bump nginxinc/nginx-unprivileged from 02c985e to 85bcbc6 in /nginx by @dependabot[bot] in #20
• build(deps): Bump python from 93ab4b7 to 76d4b7b in /relay by @dependabot[bot] in #21
• build(deps): Bump python from 93ab4b7 to 76d4b7b in /ui by @dependabot[bot] in #22
• build(deps): Bump the pip group across 2 directories with 1 update by @dependabot[bot] in #24

Full Changelog: v2.4.0...v2.4.1

Release v2.4.0

What's Changed

• fix(security): harden proxy IP trust, rate limits, TOTP, audit export, auth timing by @nicolafilippetto in #19

Full Changelog: v2.3.0...v2.4.0

Release v2.3.0

What's Changed

• Queue admin alerts and add sender-check enforcement toggle by @nicolafilippetto in #18

Full Changelog: v2.2.1...v2.3.0

Release v2.2.1

What's Changed

• build(deps): Bump nginxinc/nginx-unprivileged from 1.29-alpine to 1.31-alpine in /nginx by @dependabot[bot] in #15

Full Changelog: v2.2.0...v2.2.1

Release v2.2.0

What's Changed

• Harden containers: non-root nginx + digest-pinned base images (SAST remediation) by @nicolafilippetto in #14

Full Changelog: v2.1.0...v2.2.0

Release v2.1.0

What's Changed

• v2.1.0: choose SMTP/web ports on install + upgrade-aware installer by @nicolafilippetto in #13

Full Changelog: v2.0.2...v2.1.0

Release v2.0.2

What's Changed

• v2.0.2: fix CodeQL py/cookie-injection on the CSRF login cookie by @nicolafilippetto in #12

Full Changelog: v2.0.1...v2.0.2

Release v2.0.1

What's Changed

• build(deps): Bump pillow from 11.0.0 to 12.2.0 in /windows in the pip group across 1 directory by @dependabot[bot] in #11

Full Changelog: v2.0.0...v2.0.1

Release v2.0.0

What's Changed

• Native Windows installer (v2.0.0): run the relay + panel as Windows services by @nicolafilippetto in #10

Full Changelog: v1.0.2...v2.0.0