## bunkerity/bunkerweb — v1.6.15-rc3…v1.6.15

_41 commits._

### Features
- **feat(reverseproxy): expose upstream mutual TLS and harden validation** (bca2627)
- **feat(grpc): match reverse proxy configurability** (657ccda)
- **feat(security): require a token on the instance API and restrict its ingress** (000d819)

### Fixes
- **fix(ci): pin Ansible target interpreter** (dcca0bf)
- **fix(ci): correct Ansible runner vars** (040a13c)
- **fix(api,ui): only mark a plugin changed when its cache row was deleted** (9c48017)
- **fix(api): authorize the destination service on a custom-config move** (f3dffc2)
- **fix(reverseproxy): allow overriding generated headers** (07fa03d)
- **fix(ui): brand the reports investigate button as CrowdSec** (04330f6)
- **fix(api): rename a service and save its settings in one transaction** (e4c865b)
- **fix(jobs): verify restored archives link by link on disk** (04635b0)

### Backend
- **Road to 1.6.15 🚀** (cf4a04c)
- **Merge pull request #3940 from bunkerity/dev** (c65ce06)
- **Merge pull request #3939 from bunkerity/dev** (4e3702c)
- **Merge pull request #3938 from bunkerity/dev** (f0c9488)
- **Merge branch 'dev' of https://github.com/bunkerity/bunkerweb into dev** (6ab4a3d)
- **Merge pull request #3925 from bunkerity/dependabot/github_actions/dev/pullfrog/pullfrog-0.1.79** (715c118)
- **Merge pull request #3926 from bunkerity/dependabot/github_actions/dev/getplumber/plumber-0.4.63** (7c8e47b)
- **Merge pull request #3933 from bunkerity/dependabot/github_actions/dev/docker/build-push-action-7.4.0** (6482817)
- **Merge pull request #3934 from bunkerity/dependabot/github_actions/dev/docker/setup-qemu-action-4.4.0** (5f8479e)
- **Merge pull request #3935 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.323.0** (6c272a5)
- **Merge pull request #3932 from bunkerity/dependabot/terraform/tests/terraform/dev/scaleway/scaleway-2.83.0** (70851c9)
- **Prepare for 1.6.15 🚀** (4b312e8)
- **core(deps): Update python deps** (3007be2)
- **deps/gha: bump ruby/setup-ruby from 1.321.0 to 1.323.0** (2d19be1)
- **deps/gha: bump docker/setup-qemu-action from 4.3.0 to 4.4.0** (9f94cf3)
- **deps/gha: bump docker/build-push-action from 7.3.0 to 7.4.0** (040f2bf)
- **deps/terraform: bump scaleway/scaleway in /tests/terraform** (f6869d2)
- **deps/gha: bump getplumber/plumber from 0.4.62 to 0.4.63** (7ebb55a)
- **deps/gha: bump pullfrog/pullfrog from 0.1.78 to 0.1.79** (a300dc9)

### Docs
- **docs(features): sync the gRPC and reverse proxy sections** (e0ae9dc)
- **docs(kubernetes): the policy covers the whole internal API, on both listeners** (43646db)
- **docs(kubernetes): note the HTTPS port in the instance API policy** (62dc132)
- **docs(api): destination grant on config moves, plugin-bound cache deletes** (9a480fa)
- **docs(features): anchor path rules below the prefix** (d365067)
- **docs(web-ui): OSS roles are read and write only** (4b896b1)
- **docs: brand the site chrome and link the content tabs** (ddddb6d)
- **docs(changelog): date the 1.6.15~rc3 release** (f79766b)

### Chore
- **chore(linux): drop Fedora 43 NGINX 1.30.4 exception** (58f7d58)
- **chore(alembic): Generate migration files for the 1.6.15** (8132fdf)
- **ci(coderabbit): cut review noise seen across 54 PR threads** (4b67313)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/bunkerity/bunkerweb?utm_source=github-action)._