v0.29.2

CHANGELOG.md

@@ -4,6 +4,25 @@
 > test-only changes and packaging implementation notes were moved to
 > [`docs/CHANGELOG_TECHNICAL_ARCHIVE.md`](docs/CHANGELOG_TECHNICAL_ARCHIVE.md).
 
+## 0.29.2
+
+- Debian install/update now deploys managed logrotate policy (14 daily rotations, 100 MB max, compressed, copytruncate) and repairs the shell PATH profile on upgrade.
+
+- Fix Web Server vhosts returning 503 because backend `transient_unavailable` was applied to the main filesystem/PHP route. The main Web Server source does not consult or compile unused backends; enabled reverse-proxy Custom Locations still use the configured backend pool.
+- Remove the three error-fallback Prometheus metrics without changing internal fallback routing.
+
+- Add validated, operator-managed `PHP_ADMIN_VALUE` support for shared trusted PHP-FPM endpoints.
+- Expose service-scoped PHP response counts, response-header latency and concurrency gauges in Prometheus, alongside Web Server status and latency counters.
+- Keep FastCGI reserved parameter protections and PHP `PATH_INFO` support.
+
+## 0.29.1
+
+- Add Nginx-style internal error fallback routing for vhost sources and Custom locations, including internal-only named locations, configurable 403/404/500/502/503/504 interception, original request target/context preservation, validation-time cycle rejection and a runtime depth guard.
+- Intercept configured upstream/local errors before finalization or cache storage, then process fallback targets through normal ACL, header, compression, cache and response handling.
+- Add streaming multipart `Range` support with at most 16 byte ranges per request while retaining existing single-range behavior.
+- Add optional PHP-FPM `PATH_INFO` support that securely separates an existing script path from trailing path information.
+- Keep SQLite schema 9, saved-configuration compatibility and Cold Cache format 3 unchanged.
+
 ## 0.29.0
 - Group vhost hostnames and WWW redirect controls in Frontends. Each exact domain shows both redirect directions as selectable source → destination cards, even while redirects are off. Implicit `www.` targets are supported without adding an extra hostname. Other aliases continue serving the same application without cross-domain redirects; wildcard targets are excluded.