# Changelog v1.2.1

### Features

- The Admin Console sidebar now displays live item counts for Reports and Projects. Report counts are visible to all users, while project counts remain admin-only.
- Added a Security & Privacy console section with EU Privacy Mode controls, documentation link, and per-project activity-trail settings.
- Added server-enforced privacy sanitization that disables activity trails instance-wide in EU Privacy Mode, strips query strings and fragments from diagnostic URLs, and removes disallowed activity data before storage.
- Updated widget activity capture and report diagnostics/export behavior to honor the effective privacy settings.

### Fixes

- Prevented privacy settings from being changed when the current server settings cannot be loaded, with a safe retry path.
- Refined sensitive-data redaction to preserve ordinary long hashes and slugs while continuing to mask labeled tokens and Bearer credentials.
- Fixed annotation text editing so spaces can be entered normally.

### Upgrade

- Upgraded and pinned the production runtime, Docker images, and release workflow to Bun 1.4.0.
- Updated all Community Edition and Enterprise Edition dependencies to their latest stable releases.
- Upgraded TypeScript 7, Vite 8, React Router 7, TipTap 3, Zod 4, Hono, and related tooling.
- Replaced the vulnerable npm SheetJS package with the official SheetJS 0.20.3 distribution.

### Security

- Resolved all dependency advisories reported by `bun audit`.
  - Community Edition graph reduced from 83 advisories to zero.
  - Enterprise Edition graph reduced from 30 advisories to zero.
- Updated patched transitive dependency overrides for archive handling, HTML sanitization, URL processing, Markdown, CSS, and XML parsing.

### Maintenance

- Migrated validation schemas, router configuration, declaration generation, code splitting, and widget minification for the upgraded packages.
- Added clean frozen-lockfile verification for both dependency graphs.
- Verified all typechecks, 1,146 automated tests, Community and Enterprise production builds, and the Bun 1.4.0 production image.