0.22.0 (2026-06-19)
Features
Bug Fixes
- connection: bind stored token to its minting server origin (#1015, #1038, #1039) (#1089) (a94e3d9)
- migration: fail loud when the migration_blocked gate is unwired (#970) (#1093) (aba54ab)
- persistence: BEGIN IMMEDIATE in the UoW to avoid un-retried SQLITE_BUSY_SNAPSHOT (#1011) (#1092) (3674ef6)
- persistence: crash-safe settings writes + corrupt-file quarantine (#1010) (#1090) (d794705)
- persistence: surface settings-reset as a persistent acknowledgeable notice (#1091) (99eadb1)
- saves: adopt identical server save instead of POSTing a duplicate (#1013) (#1099) (5e7dd62)
- saves: branch-6 conflicts on baseline divergence instead of silent download (#1059) (#1095) (06652d1)
- saves: group the matrix local-file loop by canonical target (#1006) (#1096) (d33ba7f)
- saves: hold the per-ROM sync lock across slot mutations (#1057) (#1100) (d01a3fd)
- saves: legacy-slot wire contract — address slot:null saves + explicit confirm_slot_choice (#1061, #1008, #1004, #1005) (#1102) (3e1864d)
- saves: make switch_slot file handling coherent and backup-safe (#1058, #965) (#1101) (24d93a9)
- security: reject path traversal in firmware/download joins via lib safe_join (#1081) (48e8839), closes #966 #967 #968
- shortcuts: escape quotes in launch_options path to block argv injection (#1084) (16770f5), closes #969
- ui: per-game BIOS panel ignores bios change-events for other platforms (#1083) (b44c6c7), closes #1082