v2.6.14 – v2.6.18 — 2026-07-23

• feat(cra): CVE feed sourced from Debian Security Tracker (real open CVEs)
• fix(security): apply Debian OS security updates on trixie + honest CVE feed
• feat(cron): optional e-mail notification per cron job (none/errors/always)
• feat(agent): apply pending security updates immediately after the fix + keep configs
• fix(agent): self-heal half-configured packages after the security catch-up