vstable-v2.9.51 – v2026.09.14.02 — 2026-09-14

• chore(lint): US spelling in comments the misspell linter blocked on
• fix(nginx): one missing cert must not block every other vhost restore
• fix(nginx): stop disabling MTA-STS, autoconfig and groupware vhosts, restore them
• fix(security-advisor): os_eol no longer vanishes, server_banner reads nginx -T
• fix(security-advisor): three more checks that answered from a proxy
• fix(security-advisor): report the SSH settings sshd applies, not a guess
• fix(security-advisor): add PHP 8.5 to the EOL table and name its source
• fix(security-advisor): two checks that reported safe without having checked
• docs(changelog): curate v2.9.50 — drop the features that were reverted in it
• fix(mail): default mail-autoconfig ON so QR-code setup can actually work