v2.5.108 – v2.5.116 — 2026-07-15

• fix(ip-migration): only create takeover IPs on an unambiguous target server
• fix(ip-migration): restrict runtime IP activate/deactivate to importer-created migration IPs
• fix(ip-migration): guard IP takeover against ICMP-silent hosts and IPv6 DAD failures
• feat(php-settings): add per-site short_open_tag toggle
• fix(import): link imported aliases to their parent site so they show a website + hosting settings
• fix(sites): switching PHP mode no longer fails when the site's PHP version is EOL/uninstalled
• feat(protected-dirs): pick the directory with a folder browser instead of typing a path
• fix(protected-dirs): allow protecting the whole site root
• feat(backup): on-demand backup of a single website before updates
• fix(protected-dirs): generate htpasswd hash in Go, drop apache2-utils dependency
• fix(nginx): protected-directory configs can no longer break nginx on reboot
• fix(ssl): page-size selector on the domains table no longer resets to 20