v1.11.0

1.11.0 (2026-05-09)

Features

• add Allure report history preservation to staging deployment workflow (ffe5f53)
• enforce stricter validation constraints on auth and bookmark schemas and add security integration tests (5626864)
• harden security headers with fastify-helmet and enforce HttpOnly flag on session cookies (10851d8)
• integrate Trivy container scanning into staging workflow and remove redundant push triggers from scan workflow (4e6c6db)

Bug Fixes

• deps: resolve trivy high vulnerabilities via overrides and pnpm upgrade (c7326be)
• security: remove package managers from api production image after install (5f59c20)
• update pnpm build filters to include dependencies and correct absolute paths in Dockerfiles (be2aea1)