💎 Features
- feat: Audit Log fuzzy search by username (#11621) @Appleple47
- feat: Syntax highlighting view in admin custom (#11453) @mariko-h
🚀 Improvement
🐛 Bug Fixes
- fix(comment): Make /comments.update respond so editing leaves edit mode (#11641) @yuki-takei
- fix(drawio): Fix math, shapes, menu contrast and DRAWIO_URI on self-hosted instances (#11633) @yuki-takei
- fix(g2g-transfer): Fix expiring keys, overwritten destination records and silent partial imports (#11658) @yuki-takei
- fix(g2g-transfer): Abort G2G transfer before import when unique-constraint conflicts exist (#11643) @yuki-takei
- fix(g2g-transfer): Prevent auth bypass and path traversal in the transfer receiver (#11631) @yuki-takei
- fix(vault): Reject requests for objects outside the requester's view (#11604) @yuki-takei
- fix(vault): Recover a bootstrap whose runner is gone (#11599) @yuki-takei
- fix(vault): Shrink the clone transfer and fix the sparse-checkout recipe (#11605) @yuki-takei
- fix(vault-manager): Prevent clone checkouts from failing due to long page names (#11603) @yuki-takei
- fix: Replace dead Slack invite link with a single redirect page (#11626) @yuki-takei
- fix: Restore native "Choose File" button styling outside .tw-root (#11613) @yuki-takei
- fix: Bookmark folder authorization and bookmark display restriction (#11478) @arvid-e
🧰 Maintenance
- ci(deps-dev): bump vite from 6.4.2 to 6.4.3 (#11533) @dependabot[bot]
- ci(deps): bump mermaid from 11.15.0 to 11.16.1 (#11662) @dependabot[bot]
- ci(deps): bump js-yaml from 4.2.0 to 4.3.1 (#11663) @dependabot[bot]
- chore(app): remove orphaned openai:serviceType / openai:apiKey config keys (#11652) @yuki-takei
- support(contributors): Add Allan Wirth as a contributor (#11647) @yuki-takei