Security
- Per-user push notifications — Push subscriptions now store the subscriber's
usernameandallowed_chat_ids. Notifications are only sent to users who have access to the chat where the message was posted. Prevents restricted viewers from receiving push notifications for chats outside their whitelist. - Alembic migration 008 — Adds
usernameandallowed_chat_idscolumns topush_subscriptionstable
Fixed
- Stale template cache — Index HTML now served with
Cache-Control: no-cache, must-revalidateto prevent browsers from serving outdated templates after upgrades
📋 Full changelog: docs/CHANGELOG.md