Kept 1.9.2

Features

Added optional SSO-only sign-in for servers with OIDC configured. Enable it with KEPT_DISABLE_PASSWORD_LOGIN=1 after existing users have linked their SSO accounts in Settings. Thanks to @DamienZaid for suggesting this in #86!
New users can now register through OIDC when self-registration is enabled. The existing admin approval setting still applies.
Notes can now be dragged into binders when the expanded sidebar is visible. On touch screens, long-press a note to drag it.
Binders and labels can now be reordered in Edit binders and Edit labels, using drag handles or the up/down arrows. Rows move aside while dragging to show where the item will go. The order is saved across connected devices. Thanks to @computrav for the binder suggestions in #81!
Collaborators can now change a shared note’s colour and background image. Changes appear for everyone sharing the note.
Added Android support for HTTP servers using .home.arpa and .internal addresses. Thanks to @peteryates for suggesting this in #110!

Updated Move to binder to show a single-choice list instead of checkboxes. Thanks to @computrav for reporting the confusing UI in #81!
Saved locations can now be edited from Manage saved places. Tap a location to update its details and save your changes.
Fixed the arrive/leave switch displaying incorrectly in location reminders on iOS and Android.
Location searches now show how far each result is from your current location, just like saved places.
Improved location picker sizing and scrolling on smaller screens and foldables so controls stay reachable.
Fixed the remove reminder menu opening offscreen while editing longer notes.
Fixed the cursor jumping to the beginning of a note after pasting text. Thanks to @kurorinchan for reporting #112!
Fixed being unable to type above or below rich link previews. Thanks to @kurorinchan for reporting #113!
Fixed sync getting stuck after archiving or trashing notes with reminders. Thanks to @peteryates for reporting it and @amrear for the fix in #114!
Fixed mobile sign-in failing when the server’s CORS settings weren’t configured.
Improved sign-in errors so connection problems, timeouts and server errors no longer appear as an incorrect username or password.

Mobile UI improvements require the updated iOS or Android app.