v0.7.4

Changed

• The backend image runs each role with one command, api, migrate, worker, bot or sync-conflicts, so a host only chooses which command to run and when (#659).
• The landing roadmap lists the planned outcomes with an In progress or Planned status instead of versions and links to the changelog for what shipped, and the contributor docs point to the issues and their epics for planning (#635).
• A frontend build loads media images from a CDN only when NEXT_PUBLIC_MEDIA_HOST names it, and the config examples, comments and docs describe what any instance sets instead of one instance's hosting (#661).

Removed

• The repository no longer carries the vidit.app deploy workflow, its hosting config, the backup job or make import-prod; the docs describe what any instance runs: the backend roles, their schedules, backups and restores (#660).
• The promo video and guide screenshot tooling is maintained separately and no longer ships in this repository; the guide screenshots stay (#648).

Security

• The backend image no longer copies local .env files, virtual environments, local media or datasets from the build directory (#661).
• The frontend test tooling runs on Vite 8.3.5, which fixes advisories that let a page or a crafted path read files or run commands through a running Vite dev server (#654).
• The backend decodes uploaded images with Pillow 13.0.0, which fixes a heap buffer overflow in its JPEG decoder that a crafted upload could trigger (#653).