# Changelog

All notable user-facing changes are recorded here. Private deployment evidence and environment-specific rollout details are deliberately excluded.

## 1.5.0

- Added a mature Dutch operator interface with responsive overview, inventory, storage, service, alert, incident, settings, and wallboard flows.
- Expanded read-only Unraid and host collection for containers, processes, array, disks, pools, shares, capacity, and topology.
- Added bounded semantic metrics, historical queries, live WebSocket subscriptions, freshness handling, and explicit `Unknown` states.
- Added versioned dashboards, alert lifecycle, silences, maintenance, incident grouping, audit, and notification delivery controls.
- Added Authentik/OIDC, fail-closed role mapping, finite revocable sessions, and hardened production containers.
- Added portable checksummed backups, clean-room restore verification, production smoke checks, and deterministic release gates.

## Public-readiness changes

- Added a curated parentless public-source exporter and manifest validator.
- Added public deployment, security, and contribution guidance.
- Removed environment-specific defaults from portable configuration.
- Pinned third-party CI actions and added explicit read-only workflow permissions.
- Fixed personal-dashboard read authorization and bounded retained browser sessions.