chore: propagate main into development

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.3.0"
+  ".": "0.4.0"
 }

CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## [0.4.0](https://github.com/Wikid82/Hestia/compare/v0.3.0...v0.4.0) (2026-08-24)
+
+
+### Features
+
+* backend unit test scaffolding + coverage script + CI wiring ([#73](https://github.com/Wikid82/Hestia/issues/73)) ([2a71836](https://github.com/Wikid82/Hestia/commit/2a71836b42bc14b35d94b6de8147f6379a734421))
+* Codecov integration with 85% patch + project gates ([#75](https://github.com/Wikid82/Hestia/issues/75)) ([de88e32](https://github.com/Wikid82/Hestia/commit/de88e320dac9d0f6fd7d767d26d4e983b3817a20))
+* forgot/reset password ([#82](https://github.com/Wikid82/Hestia/issues/82)) ([62e04ed](https://github.com/Wikid82/Hestia/commit/62e04ed940796bd58c66fc72ff588c22b64f0e72))
+* frontend unit test scaffolding (Vitest) + coverage script + CI wiring ([#74](https://github.com/Wikid82/Hestia/issues/74)) ([cbff7a8](https://github.com/Wikid82/Hestia/commit/cbff7a8c2a9a3e391ac588f099a4b0743c639589))
+* invite data model and accept flow (backend) ([#68](https://github.com/Wikid82/Hestia/issues/68)) ([ad4f629](https://github.com/Wikid82/Hestia/commit/ad4f629f09385b7522826e7b5508af564eb87bd8))
+* invite UI (send + accept) ([#69](https://github.com/Wikid82/Hestia/issues/69)) ([7131184](https://github.com/Wikid82/Hestia/commit/71311843ba6d6ac219144aa180172aaa937b5857))
+* Playwright e2e scaffolding + core-flow coverage ([#78](https://github.com/Wikid82/Hestia/issues/78)) ([64f888c](https://github.com/Wikid82/Hestia/commit/64f888c35c285042cc9758a999ac1160c09641c2))
+* self-serve password set/change on existing profiles ([#70](https://github.com/Wikid82/Hestia/issues/70)) ([63918e2](https://github.com/Wikid82/Hestia/commit/63918e212de025cf3b59b2101e4ababca3d08b06))
+* SMTP config and mailer service ([#66](https://github.com/Wikid82/Hestia/issues/66)) ([f66f3aa](https://github.com/Wikid82/Hestia/commit/f66f3aac4ab916e3cf790920f2eeec1d9435d2e8))
+* split admin into system-admin and household-owner (hoh) roles ([#65](https://github.com/Wikid82/Hestia/issues/65)) ([21e3239](https://github.com/Wikid82/Hestia/commit/21e3239fecd3aa4e13ff4f561f469b245748e485))
+* wire go_notify_yourself for admin notifications ([#67](https://github.com/Wikid82/Hestia/issues/67)) ([10e4990](https://github.com/Wikid82/Hestia/commit/10e49904b91197adabdbe296b820bad3eb2c6ca6))
+
+
+### Bug Fixes
+
+* allow Docker backend build to fetch a newer Go toolchain ([2e986ba](https://github.com/Wikid82/Hestia/commit/2e986ba5eefe91620d61205804b2bf766a725ada))
+* decouple auth cookie Secure flag from GIN_MODE via COOKIE_SECURE ([#81](https://github.com/Wikid82/Hestia/issues/81)) ([3ce6f06](https://github.com/Wikid82/Hestia/commit/3ce6f06cf8d6782aa523f9bd8d25d68b9e307ba1))
+* pin a distinct Compose project name for the e2e stack ([a402c38](https://github.com/Wikid82/Hestia/commit/a402c38f2a6eb1d7da0ecf8a9afa3b98f3a0f112))
+* reject (not silently strip) CRLF in mailer To/Subject ([89d1ed2](https://github.com/Wikid82/Hestia/commit/89d1ed2224729258aefa12e69c030656fe92b1a1))
+* sanitize SMTP headers against email content injection ([#84](https://github.com/Wikid82/Hestia/issues/84)) ([419fcb4](https://github.com/Wikid82/Hestia/commit/419fcb4588ac20ac2a8a9694baf6a08ae29ef65e))
+
 ## [0.3.0](https://github.com/Wikid82/Hestia/compare/v0.2.4...v0.3.0) (2026-08-17)