Requests that included a forged Client-IP header could trigger an unhandled error and return a plain 500 response, bypassing normal protections. This release drops that untrusted header so requests are handled normally, keeping error responses consistent and reducing noisy, unauthenticated failures.

This release tightens security around exports and sign-in flows, and fixes a session expiry mismatch that could log you out earlier than expected. It also makes the changelog API more consistent by returning the correct public URLs and resolving projects by the same repo identifier used in links.

The view-count correction task now stops early if given a cutoff time in the future. This prevents accidentally re-processing rows that were already written correctly after the fix went live, avoiding incorrect double-decrements and protecting your view-count data from being pushed in the wrong direction.

Custom domain verification is now safer and less likely to take a verified changelog offline during transient DNS issues. Exports are also more resilient, preventing jobs from getting stuck in processing. Analytics are more accurate going forward by fixing a view-count double-count on the first view of the day.

This release patches a security issue affecting Active Storage variant processing and strengthens GitHub webhook handling during reinstall scenarios. Public endpoints now resolve owner and repo slugs even when URL casing differs, and private repositories added via webhook default to drafts to avoid accidental publishing.

This release fixes two GitHub-related issues that could block onboarding. Signups no longer fail when GitHub does not provide an email address, and GitHub App install updates no longer break when a single repository in the payload cannot be processed, helping ensure the rest of your repos still get connected.