chore(release): v2.9.1 — add CHANGELOG.md

Author: marcop135

CHANGELOG.md

@@ -0,0 +1,39 @@
+# Changelog
+
+## 2.9.1
+
+- fix(mermaid): remove redundant DOMPurify pass that stripped all text labels from diagrams
+- fix(ui): set explicit font-weight on header buttons for consistent rendering
+- chore: remove `dompurify` dependency (Mermaid strict mode already sanitizes internally)
+
+## 2.9.0
+
+- chore: version bump
+
+## 2.8.0
+
+- feat(ui): bootstrap-icons header + larger monospace editor
+- fix(test): make Mermaid tests resilient to mock/jsdom differences
+- fix(security): sanitize mermaid SVG with DOMPurify and validate upload extension
+- chore: remove stray root files and unused cross-env devDep
+
+## 2.7.5
+
+- feat: `<style>` blocks render, fresh SVG favicon, fast cache invalidation
+
+## 2.7.4
+
+- fix(ci): upload to FTP root instead of /md2pdf.marcopontili.com/
+
+## 2.7.3
+
+- feat(security+ci+repo): rehype-sanitize, PDF watermark, action bumps, untrack dist
+
+## 2.7.2
+
+- feat(privacy): block search engines and AI training crawlers
+
+## 2.7.1
+
+- chore(release): switch deploy trigger to main
+- feat(security): add Content-Security-Policy meta tag

package.json

@@ -1,6 +1,6 @@
 {
   "name": "md2pdf",
-  "version": "2.9.0",
+  "version": "2.9.1",
   "description": "Offline Markdown to PDF in the browser. No server, no uploads.",
   "keywords": [
     "markdown",