v2.4.94 – v2.4.96 — 2026-06-06

• docs: document agent hardening env vars + security changelog (v2.4.94)
• fix(ui): guard support-link scheme and fix filemanager auth token
• fix(api): bind FTP home_dir to customer + validate reseller branding URLs
• fix(agent): harden command exec, config templating and exposure (security audit)
• docs: rebuild changelog site through v2.4.93
• fix(agent): resolve pdnsutil via PATH with fallback for DNSSEC
• fix(ui): consistent table page-size changer and DNS Cloudflare guards
• fix(agent): auto-derive bind address + firewall exposure from PANEL_HOST
• fix(agent): revert PANEL_HOST auto-bind, keep hardening opt-in only