docs(configuration): note that rows_per_page outside 5 to 500 is clamped

Author: edmondas

docs/upgrading/v4.5.0.md

@@ -392,7 +392,7 @@ the same rule.
 - The MFA failure counter is tracked per authentication stage; repeated wrong MFA codes can lock an account even after a correct password.
 - Two authentication paths that were previously exempt now count towards account lockout: the dynamic DNS endpoint, and HTTP Basic Auth on the public API. This only matters if you have turned lockout on - `security.account_lockout.enable_lockout` ships disabled - but if you have, an automated client retrying with stale credentials can now lock the account it belongs to. Check any DDNS client or service account whose credentials may be out of date before upgrading. See [Security Policies](../configuration/security-policies.md).
 - `DELETE /api/v2/groups/{id}` now returns 409 when the group still owns zones, unless the request carries `confirm=true`. Deleting such a group leaves those zones without an owner, so the confirmation is required. Groups that only have members are unaffected and delete as before. API clients that destroy zone-owning groups need the extra parameter.
-- `interface.rows_per_page` now accepts any value from 5 to 500 rather than silently falling back to 10 for anything outside 10/20/50/100. If you had set a value like 25 it was previously ignored, and will now take effect.
+- `interface.rows_per_page` now accepts any value from 5 to 500 rather than silently falling back to 10 for anything outside 10/20/50/100. If you had set a value like 25 it was previously ignored, and will now take effect. A value outside 5 to 500 is clamped to the nearest limit and a warning is logged; it does not stop the application from starting.
 - PHP's session garbage collection is raised to match `interface.session_timeout`. Sessions previously expired after PHP's 1440-second default rather than the configured 1800, which returned users to the login page without an explanation.
 - An unrecognised `logging.level` now falls back to `info` rather than silently suppressing everything below `emergency`. If you have a typo such as `warn` instead of `warning` and `logging.type` is `native`, log volume will increase noticeably until the value is corrected. The logger records one warning naming the rejected value.
 - All other new features are additive or opt-in: new tables start empty, new settings default to prior behavior, and new permissions (except the auto-granted view split) are not assigned to any template.

docs/whats-new/v4.5.0.md

@@ -142,7 +142,7 @@ See [Per-Record-Type Default TTLs](../user-guide/reverse-dns.md#per-record-type-
 | New record types | HHIT and BRID (DRIP, PowerDNS 5.1), RESINFO and WALLET validators; reserved TLDs recognised | [Record Type Customization](../configuration/record-types.md) |
 | CAA issuer label corrected | The wizard's `;` option is now labelled "Disallow all CAs", matching what RFC 8659 says the value means | [DNS Wizards](../configuration/dns-wizards.md) |
 | DDNS address family routing | Each address in a `myip` list updates the record type matching its family, and an update naming a family it has no valid address for is refused | [Dynamic DNS](../user-guide/ddns/overview.md) |
-| Flexible page size | `interface.rows_per_page` accepts any value from 5 to 500; a configured value outside the presets is offered in the dropdown instead of silently becoming 10 | [User Preferences](../user-guide/user-preferences.md) |
+| Flexible page size | `interface.rows_per_page` accepts any value from 5 to 500; a configured value outside the presets is offered in the dropdown instead of silently becoming 10, and a value outside 5 to 500 is clamped to the nearest limit with a logged warning | [User Preferences](../user-guide/user-preferences.md) |
 | PTR follows a record edit | Editing an A or AAAA record can move its matching PTR, with an Update PTR checkbox alongside the existing add-time one | [Reverse DNS](../user-guide/reverse-dns.md) |
 | Session timeout honoured | PHP's session collection is aligned with `interface.session_timeout`, so sessions no longer expire early and drop users at a login page with no message | [Basic Configuration](../configuration/basic.md) |
 | Guarded group deletion | Deleting a group that still owns zones is refused over the API unless `confirm=true` is supplied, since it would leave those zones ownerless | [Groups](../user-guide/groups.md) |