0.2.4

CHANGELOG.md

@@ -1,5 +1,14 @@
 # RustBox changelog
 
+### 0.2.4
+- Fixed S3-compatible storage over explicitly allowed plain HTTP endpoints by applying `storage.allow_http` to the final `ClientOptions` object instead of setting it before `with_client_options()` replaces those options. This fixes Garage/MinIO/Ceph-style internal HTTP endpoints without weakening the HTTPS default.
+- Added an HTTP S3 regression test that verifies a request reaches an explicitly allowed local S3-compatible endpoint.
+- Updated the pinned Rust toolchain/MSRV to Rust 1.99.1.
+- Updated RustBox Docker build/runtime images from Debian 12 Bookworm to Debian 13 Trixie (`rust:1.99.1-trixie`, `debian:trixie-slim`) and switched the runtime OpenSSL package to Trixie's `libssl3t64`.
+- Updated PostgreSQL 17 Compose images from Bookworm to the supported Trixie variant.
+- No schema migration is required; runtime schema remains V047 and V048 remains the next migration number.
+- Bumped the application/source release to 0.2.4.
+
 ### 0.2.3
 - Fixed API fallback routing so administratively disabled or otherwise unknown `/api/*` endpoints return HTTP 404 instead of being caught by the SPA fallback and returning the UI with HTTP 200.
 - Added administrator feature switches for ManageSieve, diagnostics and About; disabled Sieve/diagnostics routes are not registered, and the matching settings UI is removed while keyboard shortcuts remain available.