v0.11.1

- Fixed `pr0xteus upgrade` so it refreshes the installed command before
  starting the selected release. Upgrades now apply current Tailscale routes
  and proxy-address wiring without a separate `setup` or `start` command.
- Added wrapper-upgrade regression coverage for tagged and rolling releases,
  user and system installs, and failed command refreshes.

v0.11.0

Breaking before 1.0: `POST /v1/proxies` no longer returns a top-level `url`.
Read `proxies.socks5` instead. The response now also includes `proxies.http`,
an authenticated HTTP forward-proxy URL for the same lease, cell, credentials,
expiry, and egress IP.

- Added the controller HTTP proxy on port 8080. It supports HTTP requests and
  HTTPS `CONNECT` tunnels, with all traffic routed through the selected cell.
  It strips proxy credentials and hop-by-hop headers before forwarding.
- Fixed the controller SOCKS relay so domain-form requests retain their target
  hostname instead of being forwarded as `0.0.0.0`. Failures now produce safe,
  structured logs without exposing lease credentials or destinations.
- Added HTTP proxy host-port and public-address settings, including Tailscale
  Serve wiring. The default remains loopback-only at `127.0.0.1:8080`.
- Expanded control API, real-provider, installed-stack, proxy protocol, and
  configuration tests. The 90% coverage gate now includes the HTTP proxy.
- Removed stale comments from the pipeline configuration.

v0.10.6

Updates the Servicepack framework to v1.9.2 and drops the removed `ma…

v0.10.5

v0.10.5: fix the badges coverage-artifact name so CI goes green

Fixes the badges job, the last thing keeping CI red.

- The v0.10.3 migration set the code job's coverage_artifact to
  coverage-percent.txt, but the badges job downloads the coverage artifact under
  its default name coverage. The two never matched, so once the code job went
  green (v0.10.4) the badges job failed with "Artifact not found for name:
  coverage". Removed the explicit coverage_artifact so the code job and the
  badges job both use the shared coverage default. coverage-percent.txt stays the
  file name inside the artifact.

v0.10.4

v0.10.4: fix CI by unwiring the test-lifecycle from the Testcontainer…

v0.10.1

Changes in v0.10.1

• fix(tailscale): restore routes during upgrade (a6ef355)

Full Changelog: v0.10.0...v0.10.1

v0.10.0

Changes in v0.10.0

• feat(runtime): unify installed and development stacks (14afe3c)

Full Changelog: v0.9.7...v0.10.0

v0.9.7

Changes in v0.9.7

• fix: wait for Tailscale backend readiness (62fdb22)

Full Changelog: v0.9.6...v0.9.7

v0.9.6

Changes in v0.9.6

• fix: run controller as config owner (d6f27cb)

Full Changelog: v0.9.5...v0.9.6

v0.9.5

Changes in v0.9.5

• test: wait for cell proxy traffic metrics (6f9b361)

Full Changelog: v0.9.4...v0.9.5