v2026.10.05.11 – v2026.10.06.05 — 2026-10-06
- fix(lint): US spelling in the mail-host cert test
- docs(changelog): regenerate the testing index for v2026.10.05.10
- fix(mail): a dedicated mail server can finally get a certificate for its hostname
- fix(security): the posture snapshot sweep stopped before its first customer
- fix(lint): US spelling in the new certificate tests
- fix(tls): the TLS health report judges the certificate it actually fetched
- fix(ssl): a wildcard certificate counts for the names it covers
- fix(nginx): the HTTPS catch-all covers HTTP/3 too, so an unserved name stops leaking a customer's certificate
- fix(ui): the brand plate is the left half of the header band, and the two fleet charts share a row
- feat(sitebuild): the decided name rules become one setting (ADR-011 step 4)
- fix(mail): balance the body zone so the gap before the footer matches the one after the brand band
- fix(mail): the default envelope gives the page a margin, lets the card shrink and widens the inset
- docs(notes): record the live negative tests of the QUIC catch-all, wildcard coverage and TLS health probe on the packaged build
- fix(ui): the brand plate is the body surface in dark too, so the band has no step
- docs(changelog): regenerate the testing index
- feat(mail): an install with no branding at all gets our own logo in the band
- docs(notes): record the live measurement of the mail-port TLS health probe and the certbot deploy hook