1.9.1

Added

• Live Activity can show several labelled values from one poll, each with its
  own name, colour, unit and threshold. The badge shows the first label that
  reaches its threshold; the rest open on hover, tap or keyboard focus.

• Folder badges now show the badge of the app inside them that is reporting,
  rather than a total.

• A startup warning when CONFIG_PATH or ICONS_PATH points at a directory
  that does not exist.

• Release images carry an SBOM attestation, verifiable with
  cosign verify-attestation. See docs/security.md.

• Support for Windows High Contrast. The wallpaper and the blurred materials are
  dropped, the current page is marked by shape as well as colour, and badges keep
  their status colour.

• Settings states which of an app's labels the badge will show.

• ?lang=en-XA renders the interface expanded and accented, and ?lang=cimode
  renders every string as its key. See docs/i18n.md.

Changed

• Badge text is white wherever white is readable, instead of whichever ink
  scores higher.

• Badges show the number alone on every layout, so a unit cannot make one wider
  than the icon it marks. The unit stays in the popover and in the badge's
  accessible name.

• The home screen fits more columns and rows as the window grows, instead of
  scaling four columns to fill it.

• A multi-value badge shows a wider second pill behind the first, so the extra
  values read as a stack.

• The Compose file caps CPU with cpus instead of a relative share, bounds the
  Node heap to the memory limit, and runs an init process.

Fixed

• The signature verification commands in docs/security.md now name the
  repository as it is spelled, so they verify a release image instead of
  rejecting it.

• Scripts, stylesheets, translation catalogs and the web manifest no longer
  carry a duplicate Content-Type header.

• Counted messages now use each language's own plural rules. French and Persian
  put a count of zero in the plural form. The import confirmation and the badge
  label limit were still counting in English.

• The Pull Requests widget now translates its caption, and the clock takes its
  day and month names from the reader's locale. Both were always English.

• Persian now uses the import, export, widget and file terms that shipped
  software uses, one word per concept, and no longer leaves "Import" in English
  in one message.

• Settings now translates its accessible names, its remaining field labels and
  its page title, which were English in every language.

• German, Spanish, French, Chinese and Persian now use one agreed word per
  concept, and no longer leave "Logging", "API key", "Collection ID" or
  "Authentication Proxy" in English.

• A tile label is now cut at the end of its own name in Safari too. On a
  right-to-left dashboard a Latin name lost its beginning instead.

• Opening and saving an app no longer rewrites a colour that was not changed.

• Admin form toggles now carry accessible names.

• CONFIG_PATH and ICONS_PATH now take effect. The container was overriding
  both, so a config file moved elsewhere was ignored.

• Widgets on the phone layout no longer render taller than the card that clips
  them.

• In right-to-left languages every page after the first is reachable again. The
  pages moved off the wrong side of the screen, and the arrow keys and swipes
  ran backwards.

• Arrow keys and a mouse drag now change page on the phone layout. A second page
  was unreachable without a touchscreen.

• The screen shown when the API is unreachable no longer renders raw translation
  keys.

• Placeholder text in fields without a rule of their own is now readable. The
  first-run password dialog was the worst affected.

• The initial shown for an app with no icon takes its colour from the tile
  behind it. White was unreadable on most of the colours the picker offers.

• The badge popover can be hovered without closing, and no longer truncates the
  label names it exists to show.

• The page indicator now takes its tint from the wallpaper behind it, and marks
  the current page by shape as well as colour. Over a light wallpaper the whole
  indicator was invisible.

• A tile's badge is now part of what a screen reader reads for that tile. It was
  unreachable there, and each badge announced itself on the poll instead.

• The dashboard heading now sits inside a landmark.

• The search field's placeholder is now readable over any wallpaper.

• Each widget now shows an icon for what it is in the Settings list, instead of
  every widget of the same size sharing one.

• The Settings entry in search now opens in the same tab and no longer shows the
  arrow that means a link leaves the dashboard.

• The boot screen shows a quiet indicator when loading takes more than a moment,
  instead of an empty rectangle.

• In Settings, the logging note now sits with the row it describes, and the host
  address note says what it does rather than naming the mechanism.

• Numbers on the dashboard now use the digits of the reader's locale. A Persian
  reader whose device asks for Persian digits sees them in badges, the weather,
  the system summary, disk health, Pi-hole and reading progress; one whose device
  asks for Latin digits keeps those.

• A configuration whose folder points at an item that is not in it is now
  rejected, naming the missing entries, instead of saving an empty folder.

• The light theme's accent hues now match the current reference kit. Nine had
  drifted to an earlier generation, along with the separator and one fill.

• A tile whose label is too long to fit now shows the full name on hover.

• Save is the same button on every Settings pane. It was green on two panes and
  teal on a third, for one action.

• In right-to-left languages a badge now sits on the leading corner of its tile,
  the badge popover follows it, a Settings row's title and subtitle share an
  edge, and the Now Playing arrows point the way they read.

Security

• The image now installs Alpine's current security updates at build time.