v1.6.2

1.6.2 - 2026-10-15

Added

• The dashboard shows an accessible loading state while endpoints are fetched and can pretty-print
  valid JSON test responses while preserving access to their raw bodies. A browser-local workspace
  setting chooses whether endpoint tests prefer raw or pretty-printed responses when both are available.
• Matched mock POST, PUT, and PATCH requests allow empty bodies, enforce a 1 MiB size limit, and
  validate the syntax and UTF-8 encoding of non-empty JSON bodies before applying configured responses.
  Malformed JSON and invalid content types return 400, oversized bodies return 413, and unsupported
  JSON charsets return 415.

Changed

• Dashboard endpoint testing uses a more compact response layout, and the built-in parade schedule
  example is labeled as a timeout demonstration.
• Deployment documentation now aligns Azure Container Apps to minimum and maximum replica counts of
  1 so process-local configuration and statistics remain consistent while the application stays
  continuously available.
• Container release guidance documents the Docker Hub token permissions needed to publish images
  and remove temporary architecture tags.

Security

• Valid Basic credentials now establish a one-time, process-scoped secure dashboard session cookie,
  replacing per-request PBKDF2 work for subsequent administrative requests in the same browser
  session.