- Added UI‑based admin registration; deprecated DISABLE_AUTH and related env vars, making admin auth mandatory (breaking change).
- Introduced optional city/region level geolocation (extra 1 GB RAM), Google‑Analytics import, CSV export, and ARM64 Docker support (feature).
- Added security hardening with Content‑Security‑Policy header for favicons and multiple minor feature improvements and bug fixes.