Changelog — 2026-06-19

Window: 2026-06-18T15:57:57Z → 2026-06-19T15:57:57Z (UTC) · Branch: main · PRs merged: 18

At a glance

_{Line counts come from git log --numstat on main and include generated, vendored, and lock files. "Today" line counts are bucketed by commit date, while PR/issue counts use merge/close date.}

Performance

#1099 — perf: server-side pagination for Wantlist list view (Phase 4 / #1006)

by @jdooley-clt · 2026-06-18

Part of #943 (Performance Phase 4 — server-side pagination for list views, issue #1006).

#1103 — perf(caching): Performance Phase 5 — IMemoryCache + ETag/Cache-Control (#1001)

by @jdooley-clt · 2026-06-19

Part of #943 (Performance epic). Sub-issue #1001 — Phase 5: Caching.

#1109 — perf(assets): self-host Bootstrap Icons + drop jsDelivr CDN (P3.7, #1008)

by @jdooley-clt · 2026-06-19

Part of #1008

Documentation

#1098 — docs(security): Security track completion summary

by @jdooley-clt · 2026-06-18

Adds the Security track completion summary to docs/summaries/, matching the existing Moderation, Legal, Documentation, and Onboarding overviews.

Chores

#1092 — build(deps-dev): Bump jsdom from 25.0.1 to 29.1.1

by @dependabot[bot] · 2026-06-18

Bumps jsdom from 25.0.1 to 29.1.1.

Release notes

Sourced from jsdom's releases.

v29.1.1

• Fixed 'border-radius' computed style serialization. (#1093 — build(deps-dev): Bump vitest from 2.1.9 to 4.1.9

  by @dependabot[bot] · 2026-06-18

  Bumps vitest from 2.1.9 to 4.1.9.

  Release notes

  Sourced from vitest's releases.

  v4.1.9

  🐞 Bug Fixes

  • Fix importOriginal with op…

    #1094 — build(deps): Bump actions/setup-node from 4 to 6

    by @dependabot[bot] · 2026-06-18

    Bumps actions/setup-node from 4 to 6.

    Release notes

    Sourced from actions/setup-node's releases.

    v6.0.0

    What's Changed

    Breaking Changes

    • Limi…

      #1095 — build(deps): Bump actions/checkout from 4 to 7

      by @dependabot[bot] · 2026-06-18

      Bumps actions/checkout from 4 to 7.

      Release notes

      Sourced from actions/checkout's releases.

      v7.0.0

      What's Changed

      • block checking out fork pr for pull_request_target an…

        #1096 — build(deps): Bump azure/login from 2 to 3

        by @dependabot[bot] · 2026-06-18

        Bumps azure/login from 2 to 3.

        Release notes

        Sourced from azure/login's releases.

        Azure Login Action v3

        What's Changed

        • upgrade nodejs from 20 to 24 and update dependencies by