What's new:
- All metadata for Python builds and packaging have been migrated to
pyproject.toml, following PEP 621 and PEP 639 for license definition. This raised the minimumsetuptoolsrequirement for building the wheel to 77.0.3 and hence the minimum Python version to 3.9. Pre-compiled wheels e.g. installed viapipfrom PyPI however still work with Python 3.7: #3149 @MichaIng - The test button for testing notification email settings has been fixed, in case multiple receiver email addresses were added: #3170 @MichaIng
- Closed a security vulnerability, published as GHSA-j945-qm58-4gjx and CVE-2025-60787, which allows RCE for admin-authenticated users with crafted inputs, executed as shell code by
motion's event action feature. Inputs were not checked in the backend, but only in the frontend, which can be manipulated at the client side. To address the issue, the same limitations and input checks done by the frontend have been added to the backend to mitigate the issue: #3203 @prabhatverma47 @MichaIng - Nepali language has been added: #3174 @sangampaudel530
- Danish language has been added: #3190 @Tbnilen
- Several translation updates, many thanks to all @weblate contributors ❤️