1.16.0

Added

• Add Allowed Addresses to Settings, General, to list extra host names
  Stackyard answers on while no password is set.

• Add a Type to Search switch to Settings, so typing on the dashboard can stop
  opening search.

Changed

• Keep widget pages in the browser cache between dashboard loads, and check
  translation files for changes instead of downloading them again in every
  widget.

• Make typing in search faster when folders match, and show the dashboard sooner
  on slow connections by sending its start-up requests together.

• Show the Clear app icon background as a checkerboard in the colour picker.

• Show numbers in the digits of the language chosen in Settings, such as Persian
  digits for Persian, instead of the browser's region.

• Show the Shahanshahi date with its year on the clock in Persian.

• Draw the analog clock date at the same weight as the digital clock date.

Fixed

• Translate the remaining English labels and hints in Settings, the colour
  picker and the sign-in screen, and show failure reasons in the selected
  language.

• Show counts, totals, badge values and other numbers on the dashboard, in
  widgets and in Settings in the reader's digits.

• Mirror folder rows, the phone folder title and widget swipes in right-to-left
  languages, and keep brackets around names in place.

• Read Prometheus series whose label values contain spaces.

• Say why an address check got no answer, such as a refused connection, an
  unknown host or an invalid address, instead of a certificate warning.

• Report a service that hangs up mid-reply at once, instead of as a timeout.

• Answer an oversized icon upload or wallpaper link with an error instead of
  dropping the connection.

• Refuse a Settings save that would overwrite dashboard changes made in another
  tab or on another device.

• Keep both changes when two dashboard edits or two Appearance switches are
  saved in quick succession.

• Keep the last saved wallpaper when a wallpaper link fails, or when another
  setting is saved before a new upload.

• Stop a failed Unsplash key save from taking effect until the next config read.

• Use a saved widget's or app's stored key, headers and parameters when its
  Fetch button is pressed, and show the specific reason a Fetch failed.

• Show the Settings load-failure message and Retry button when the config cannot
  be read, readable in both themes.

• Raise the contrast of text, badges, fields and icons in the light theme across
  the dashboard, Settings, the sign-in screens and the DNS and Weather widgets.

• Show Settings controls, selected items, keyboard-selected results and text
  field edges in Windows high contrast mode.

• Show focus rings on the search, header, poll interval and icon search fields,
  the Cancel and Import buttons and the Settings sliders.

• Keep keyboard focus in place when Settings redraws or edits an item, inside
  the sign-in screen, and off switched-off sections of the item editor.

• Name and announce Settings controls, Fetch and Test results, the current
  section, group headings and folder app badges for screen readers.

• Open widget links from the keyboard in the DNS, Weather, GitHub, VPN and
  Backup widgets, and fix Enter on the Now Playing arrows and Books spines.

• Fit Settings and the empty dashboard on narrow and short screens, at 400% zoom
  and around the iPhone notch, and keep the Settings sidebar on screen.

• Make folder page dots and badges that open a value list easier to tap.

• Blur the background behind the Settings sign-in and set-password screens on
  Safari 17.

• Style the text field in the current password and New Folder dialogs like other
  Settings fields.

• Stop extra dashboard and widget refreshes after the tab is hidden, the
  dashboard page is swiped or a phone rotates.

• Mark badges and health as out of date when the dashboard is signed out,
  instead of showing frozen values as current.

• Stop the Connections map from adding another animation loop on every refresh
  and resize.

• Release the Pi-hole session when a DNS widget refresh fails, so repeated
  failures no longer lock the widget out.

• Show an error instead of stale or empty data when the GitHub, Books, Weather,
  Backup or System Stats source fails, or a Backup job is deleted.

• Make the widget template report failures as errors, so widgets copied from it
  do not show them as empty data.

• Show a disk that failed its SMART check as failed on Disk Health, instead of
  as a warning.

• Colour each System Stats value with its own slot colour, whatever the slot
  order.

• Show "Unknown timezone" on the clock when its timezone name is not recognised,
  instead of a blank or stopped clock.

• Show Persian and other joined-script dates correctly on the analog clock in
  Safari.

• Show an emoji initial on an app with no icon.

• Open Settings when the browser blocks site storage.

• Stop the container cleanly on docker stop instead of killing the dashboard
  mid-shutdown.

Security

• Stop a widget provider set to an inherited object name from returning saved
  API keys.

• Require the current password to change the password or turn off password
  protection.

• Keep sign-in on and refuse saves when the config file is damaged or cannot be
  read, and show how to fix it.

• Answer only IP addresses, local names and allowed addresses while no password
  is set. Add each extra domain name in Settings, General, Allowed Addresses.

• End the session on the server at sign-out, so a copied session cookie stops
  working.

• End every session 30 days after sign-in, even while it is in use.

• Stop a crafted XML or Prometheus reply from a configured service from freezing
  the API.

• Close health checks and refused redirects against a service that streams
  without end, so they no longer pile up connections.

• Count the DNS lookup toward the time limit for addresses tested in Settings.

• Keep malformed request bodies, such as a mistyped password, out of the server
  log.

• Stop requests for unknown widget ids from growing the API's memory.

• Refuse a Dashy or Homepage import file that expands to more than 5,000
  entries, instead of freezing the page.

• Send a restrictive Content-Security-Policy on API responses.

• Apply the Compose file's capability, privilege and resource limits to the
  Unraid template.