Release v0.20.0

What's Changed

🛡️ Security

• HIGH — Hardened lxc-updater.sh candidate binary detection with set -f / set +f, preventing pathname expansion on unquoted loop variables (#150)
• MEDIUM — Hardened the UPGRADE_LIST package array expansion in system-update-notifier.sh with set -f / set +f (#148)

📊 UX / Reporting

• Added Total Containers Processed aggregate metric to pve-update-notifier.sh (#149, #152)
• Fixed empty-state summary so per-state counters and Total Pending Updates always render, even when no LXC containers were inspected (#149)
• Added explicit CLI log for total upgraded packages in system-update-notifier.sh (#145)
• Switched the empty-state container count from ✅ to ⏩️ to distinguish "no containers" from successful operations (#146)

📝 Docs

• Corrected summary wording from "Total packages installed" to "Total packages upgraded", matching the underlying apt-get dist-upgrade behaviour (#151)

Notes

• PR #147 was not applied: functionally identical to #148, and it deleted the tracked .Jules/palette.md learning log.

All scripts validated with bash -n, scripts/test_app_cmd_sanitize.sh and scripts/test_ux_mirrors.sh.

Full Changelog: v0.19.1...v0.20.0