First release candidate for 1.0.0. Feature work is frozen; final testing and feedback are welcome before the stable release.
- Optional verified-email account requests with administrator approval, domain restrictions and applicant status/recovery. Thanks to @arminbahl for the request (#66).
- Durable registration and email limits, expiring requests, configurable password length and offline common-password blocking. CAPTCHA remains deferred to 1.x.
- Browser, translation and documentation refinements, plus PostgreSQL security-update guidance.
Registration approval is off by default and existing accounts retain access. Enabling it requires SMTP and ALTERO_PUBLIC_URL; see registration settings. New registration text falls back to English where translations are pending.
Keep current library backups. Back up the database and attachment storage together before upgrading; database migrations are included. SMTP-enabled instances must configure ALTERO_PUBLIC_URL. Follow the upgrade instructions and review the validation results and limits.