## bunkerity/bunkerweb — v1.6.14-rc1…v1.6.14-rc2

_61 commits._

### Features
- **feat(db): add migration scripts for upgrading to version 1.6.14~rc2 across all database types** (bac75c6)
- **feat(headers): sync Permissions-Policy defaults with Chromium** (2bb4f13)

### Fixes
- **fix(customcert): Fix wildcard SNI fallback for custom certificates** (119a8f2)
- **Merge pull request #3745 from xabru/fix/customcert-wildcard-fallback** (5dec595)
- **fix(api,ui): raise biscuit Datalog time budget and reject attenuated tokens** (a72deb5)
- **fix(ui): keep live log follow pinned and stop the new-lines pill jumping** (74e49ca)
- **fix(ui): tell the user when a lost session discards their submitted change** (26d95ce)
- **[#3754] fix(crowdsec): restore the online_client block when DISABLE_ONLINE_API goes away** (e8fb3a6)
- **fix(autoconf): fail loudly when a Kubernetes watch stops streaming** (c07b550)
- **fix(access): let a whitelisted IP through an active ban** (ad83bdb)
- **fix(whitelist): merge configured WHITELIST_* into the stored lists** (60bf0d7)
- **fix(lua): throttle missing-setting logs instead of erroring per request** (d5403c6)
- **fix: Fix Lua variable fallback for partial service settings** (6396a22)
- **fix(scheduler): keep os.environ identity across reloads** (a035b43)
- **fix(metrics): never sync an evicted LRU counter as the string "nil"** (2bb0159)
- **fix(metrics): keep reports when datastore fills** (564b369)
- **fix(ui): Improve UI performance for reports, logs, home, and plugin catalogs** (c8b9001)
- **fix: validate environment variable names** (c7bd775)
- **fix(db): anchor-aware persistence for multiple-group settings** (907b3aa)
- **fix(customcert): add wildcard fallback and extract TLS hook** (a331fa3)

### Backend
- **Merge pull request #3763 from bunkerity/staging** (256d0c3)
- **Merge pull request #3762 from bunkerity/dev** (4be38df)
- **Merge branch 'dev' of https://github.com/bunkerity/bunkerweb into dev** (d45d471)
- **Merge pull request #3749 from bunkerity/dependabot/github_actions/dev/docker/login-action-4.5.0** (2a1e052)
- **Merge pull request #3744 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.321.0** (03de3a1)
- **Merge pull request #3743 from bunkerity/dependabot/github_actions/dev/github/codeql-action/analyze-4.37.3** (c389cce)
- **Merge pull request #3742 from bunkerity/dependabot/github_actions/dev/github/codeql-action/init-4.37.3** (8119424)
- **Merge pull request #3741 from bunkerity/dependabot/github_actions/dev/github/codeql-action/upload-sarif-4.37.3** (d166a56)
- **deps(ui): update DOMPurify, ApexCharts, i18next; drop unused vendored assets** (7abdcef)
- **deps: bump mbedtls, openresty lua set, luajit, lua-cjson, lua-resty-http** (da9654d)
- **deps(crs): update coreruleset to v4.28.0 and v3.3.10** (5b46df3)
- **Merge pull request #3760 from bunkerity/dev** (d69f8d1)
- **Road to 1.6.14~rc2** (35087d9)
- **crowdsec: initialize bouncer for service-level activation** (3dcfbbc)
- **[#3754] feat(crowdsec): allow running the embedded agent without the Central API** (881138a)
- **[#3750] docs(autoconf): give the Kubernetes controller a liveness probe** (efb152a)
- **deps/gha: bump docker/login-action from 4.4.0 to 4.5.0** (f98a4d8)
- **deps/gha: bump ruby/setup-ruby from 1.319.0 to 1.321.0** (4586de4)
- **deps/gha: bump github/codeql-action/analyze from 4.37.1 to 4.37.3** (6d80d44)
- **deps/gha: bump github/codeql-action/init from 4.37.1 to 4.37.3** (626c183)
- **deps/gha: bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.3** (607cbb8)
- **Merge pull request #3738 from bunkerity/dev** (ac571d5)
- **Merge pull request #3727 from bunkerity/dev** (2ae80bb)
- **Merge pull request #3726 from bunkerity/dev** (e6aa421)
- **Merge pull request #3710 from bunkerity/dev** (5f06a37)
- **Merge pull request #3694 from bunkerity/staging** (f035a15)
- **Merge pull request #3693 from bunkerity/dev** (12bd76c)
- **Merge pull request #3679 from bunkerity/dev** (a5c40a8)
- **Merge pull request #3675 from bunkerity/dev** (b025d00)
- **Merge pull request #3653 from bunkerity/dev** (94ad2de)
- **Merge pull request #3652 from bunkerity/dev** (53dfd30)
- **Merge pull request #3641 from bunkerity/dev** (6d04689)
- **Merge pull request #3614 from bunkerity/dev** (1e918de)
- **Merge pull request #3609 from bunkerity/dev** (e05beda)
- **Merge pull request #3608 from bunkerity/dev** (9ad3feb)

### Docs
- **docs(mcp): sync MCP server example and docs to bunkerweb-mcp 0.2.0** (d92f226)

### Chore
- **chore: Update Python dependency pins and lockfiles** (0845d28)
- **chore: refresh pinned Docker image digests** (76377a3)
- **chore: update CHANGELOG.md** (06b2532)
- **chore: Update CHNAGELOG.md** (753d240)
- **build(linux): remove FreeBSD packaging** (306e6ee)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/bunkerity/bunkerweb?utm_source=github-action)._