Changes

• Release
  • PR: #3230
• fix(teams): stop telling admins to install an app that is already installed
  • PR: #3255
• feat(home): self-hosted landing page and a governed claims matrix
  • PR: #3252
• fix(database): transform the leaves of a nested FindOperator, not the operator
  • PR: #3256
• feat(home): confirm certification evidence and clear the claims review queue
  • PR: #3257
• docs: correct the Workflows pages and add the missing Incidents and Status Pages sections, in all 16 languages
  • PR: #3258
• docs(telemetry): troubleshoot Windows collector service errors 2 and 1064
  • PR: #3263
• docs(i18n): re-translate all 255 localized docs pages with a single model
  • PR: #3262
• feat(network): filter the topology and site maps by device health
  • PR: #3264
• Linear-grade dashboard polish and speed: ⌘K command palette, skeleton loading, motion pass, and first-load/waterfall performance fixes
  • PR: #3271
• Split the admin user on-call page into six, and let project admins add notification methods for a user
  • PR: #3272
• fix(identity): require an emailed token to claim an invited account
  • PR: #3273
• fix(security): expire, limit and hash notification-channel verification codes (GHSA-5cr8-vph4-3hrf)
  • PR: #3274
• fix(monitor): link a monitor's own resources as affected resources
  • PR: #3278
• feat(monitor): default incoming monitors to body-content criteria
  • PR: #3277
• fix(chart): split keda.install from keda.enabled so KEDA can bootstrap
  • PR: #3280
• feat(on-call): let critical mobile pages override silent mode and Do Not Disturb
  • PR: #3279
• feat(recommendations): recommend monitors per service runtime
  • PR: #3276
• fix(on-call): let escalation rules read schedule roster state
  • PR: #3281
• fix(logs): stop the Logs viewer hitting the 3 GiB ClickHouse ceiling
  • PR: #3282
• fix(2fa): issue TOTP QR codes Google Authenticator can actually read
  • PR: #3283
• Fix enterprise conversion tracking in the OneUptime repository and…
  • PR: #3285
• fix(discovery): make a scan stuck in "Pending" say why
  • PR: #3290
• fix(analytics): send one GA4 event per conversion, document the GTM wiring
  • PR: #3291
• docs(analytics): record the key events actually configured in GA4
  • PR: #3294
• fix(ci): let the App test job finish again
  • PR: #3292
• feat(network): ask link rules' "exactly one parent" question per site
  • PR: #3296
• fix(lint): annotate the probe-state fixtures in the discovery diagnosis test
  • PR: #3295
• fix(monitor): "All Values" over time fired on a single check (#2321)
  • PR: #3293
• feat(mobile): make admin-dashboard Global SSO usable on iOS and Android
  • PR: #3289
• fix(analytics): stop form submits reporting "FORM SUBMIT: undefined"
  • PR: #3297
• perf(ci): run App Test as one job again, the shards cost more than they save
  • PR: #3298
• fix(test): guard migration registry ordering globally, not per-migration
  • PR: #3299
• fix(release): give the release SaaS e2e the verification-code seam
  • PR: #3300
• feat(sso): discover project OIDC on mobile, and make Global SSO revocable
  • PR: #3301