Changelog — 2026-06-18

Window: 2026-06-17T16:23:59Z → 2026-06-18T16:23:59Z (UTC) · Branch: main · PRs merged: 7

At a glance

_{Line counts come from git log --numstat on main and include generated, vendored, and lock files. "Today" line counts are bucketed by commit date, while PR/issue counts use merge/close date.}

Features

#1082 — feat(security): Phase 3 XSS containment & content sanitization (#955)

by @jdooley-clt · 2026-06-18

Security Phase 3 — XSS containment & content sanitization

#1085 — feat(security): Phase 2 auth hardening — lockout, generic errors, session revocation, MFA design (#957)

by @jdooley-clt · 2026-06-18

Summary

#1086 — feat(security): Phase 4 privacy — deletion grace window, export, DSAR docs (#958)

by @jdooley-clt · 2026-06-18

Part of #958. Security Phase 4 — privacy / data protection. In-scope items only (SE4.1/4.2/4.3 verified already shipped; SE4.6 deferred to Phase 5).

#1089 — feat: move daily changelog publishing from Blog to Docs/Release-Notes

by @jdooley-clt · 2026-06-18

Summary

Documentation

#1081 — docs: add Documentation, Onboarding, and Legal track summaries

by @jdooley-clt · 2026-06-17

What

Other

#1087 — Move Reference link from System to Community sidebar section

by @jdooley-clt · 2026-06-18

Summary

#1088 — Security Phase 5 (PR B): supply-chain scanning + disclosure

by @jdooley-clt · 2026-06-18

Part of #956.

---

Generated 2026-06-18T16:23:59Z UTC by scripts/generate-changelog.ps1. Summaries: github-models (openai/gpt-4o-mini).