v0.28.0

ROADMAP.md

@@ -1,5 +1,18 @@
 # RustProxy roadmap
 
+## 0.28.0 - GeoIP control, listener clarity and cache policy refinement
+
+Current direction: 0.27.3 -> 0.28.0
+
+- [x] Add on-demand GeoIP refresh through the authenticated administration UI and reuse the automatic updater pipeline.
+- [x] Hot-swap validated GeoIP databases so subsequent country ACL/rate-limit/logging lookups use the new data without a process restart.
+- [x] Use direct GeoIP file URLs with optional per-file SHA-256 verification and support either separate IPv4/IPv6 CSV ranges or one native MaxMind MMDB database.
+- [x] Present active listeners as readable HTTP/HTTPS endpoint cards with explicit H3/UDP state.
+- [x] Add configurable `Via: RustProxy` cache response metadata while preserving upstream Via values.
+- [x] Preserve cache objects across bypass and response-only diagnostic/Via setting changes.
+- [x] Separate vhost Security header-rule Delete controls from the Operation selector.
+- [x] Keep SQLite schema 8 and COLD format 3 unchanged.
+
 ## 0.27.3 - HTTP/3 cache parity and bounded memory retention
 
 Current direction: 0.27.2 -> 0.27.3