[!WARNING] This is an early release candidate for testing purposes. There are known rough edges in the team management flow and notifications. Not recommended for production deployments.

What's Changed

• Show disabled homepage when UI explicitly disabled in https://github.com/onetimesecret/onetimesecret/pull/1692
• Add authentication-required mode with dedicated route guards in https://github.com/onetimesecret/onetimesecret/pull/1694
• Improve README UX and create detailed INSTALL guide in https://github.com/onetimesecret/onetimesecret/pull/1696
• Improve passphrase validation and UI layout in https://github.com/onetimesecret/onetimesecret/pull/1697
• Make settings view in colonel clearly read-only in https://github.com/onetimesecret/onetimesecret/pull/1704
• Fix build issues and ESLint configuration in https://github.com/onetimesecret/onetimesecret/pull/1708
• Backport latest OCI build workflows to rel/0.22 in https://github.com/onetimesecret/onetimesecret/pull/1710
• Remove external dependency from vite build in https://github.com/onetimesecret/onetimesecret/pull/1715
• Fix password generation config key handling in https://github.com/onetimesecret/onetimesecret/pull/1771
• Add branch information note to readme in https://github.com/onetimesecret/onetimesecret/pull/1824
• Merge dependency updates to main in https://github.com/onetimesecret/onetimesecret/pull/1826
• Update gitignore files from develop in https://github.com/onetimesecret/onetimesecret/pull/1829
• Update renovate config w/ better docs in https://github.com/onetimesecret/onetimesecret/pull/1830
• Fix class attribute formatting in MastHead.vue by @jhob101 in https://github.com/onetimesecret/onetimesecret/pull/1840
• Version bump to v0.22.9 in https://github.com/onetimesecret/onetimesecret/pull/1846
• Update custom logo MastHead styles for site name by @jhob101 in https://github.com/onetimesecret/onetimesecret/pull/1849
• Direct copy of claude workflows from develop in https://github.com/onetimesecret/onetimesecret/pull/1853
• Remove social metadata for custom domains in https://github.com/onetimesecret/onetimesecret/pull/1927
• [#1919] Autoload all available languages in https://github.com/onetimesecret/onetimesecret/pull/1928
• Bump version to v0.22.10 in https://github.com/onetimesecret/onetimesecret/pull/1929
• New configuration item allowed_signup_domains by @david-garcia-garcia in https://github.com/onetimesecret/onetimesecret/pull/1936
• Include mail validation config in boot log banner in https://github.com/onetimesecret/onetimesecret/pull/1941
• Set up Ruby 3.4.7 SessionStart hook in https://github.com/onetimesecret/onetimesecret/pull/1938
• Copy gitgnores from develop for max copaceticity in https://github.com/onetimesecret/onetimesecret/pull/1996
• Backport homepage mode functionality in https://github.com/onetimesecret/onetimesecret/pull/2010
• Fix CIDR privacy blocking logic in homepage mode in https://github.com/onetimesecret/onetimesecret/pull/2011
• Add default homepage mode in https://github.com/onetimesecret/onetimesecret/pull/2012
• Remove the incomplete incoming secrets feature in https://github.com/onetimesecret/onetimesecret/pull/2017
• Re-add Incoming Secrets feature in https://github.com/onetimesecret/onetimesecret/pull/2016
• Version bump to v0.22.11 in https://github.com/onetimesecret/onetimesecret/pull/2022
• Add test coverage for chain_length == trusted_proxy_depth scenario in https://github.com/onetimesecret/onetimesecret/pull/2040
• Sync Claude workflow files from practical-gagarin branch in https://github.com/onetimesecret/onetimesecret/pull/2058
• [#2073] Update workflow triggers to include 'main' branch in https://github.com/onetimesecret/onetimesecret/pull/2076
• fix/rubocop in https://github.com/onetimesecret/onetimesecret/pull/2077
• [#2073] Settings migration infrastructure for v0.23 in https://github.com/onetimesecret/onetimesecret/pull/2075
• feat(dx): Add Git JSON merge driver for locale files in https://github.com/onetimesecret/onetimesecret/pull/2080
• Fix OCI workflow and add tmate debugging support in https://github.com/onetimesecret/onetimesecret/pull/2078
• Fix event limit lookup in https://github.com/onetimesecret/onetimesecret/pull/2112
• Bump version to v0.23.1 in https://github.com/onetimesecret/onetimesecret/pull/2113
• feat(locales): add Russian language translates by @kh0mka in https://github.com/onetimesecret/onetimesecret/pull/2130
• feat(api): add guest routes for anonymous API access (#2190) in https://github.com/onetimesecret/onetimesecret/pull/2191
• Bump version to 0.23.2 in https://github.com/onetimesecret/onetimesecret/pull/2327
• Add note about intermittent claude-review failure in https://github.com/onetimesecret/onetimesecret/pull/2376
• Fix for TTL above 7 days in https://github.com/onetimesecret/onetimesecret/pull/2393
• chore: bump version to 0.23.3 in https://github.com/onetimesecret/onetimesecret/pull/2399
• Persist translation metadata across database rebuilds in https://github.com/onetimesecret/onetimesecret/pull/2414
• Fix translation script paths and i18n backend initialization in https://github.com/onetimesecret/onetimesecret/pull/2413
• Mass translation update with SHA256 change tracking in https://github.com/onetimesecret/onetimesecret/pull/2415
• Consolidate CSRF handling for OmniAuth SSO routes in https://github.com/onetimesecret/onetimesecret/pull/2416
• Add OmniAuth SSO integration for OIDC identity providers in https://github.com/onetimesecret/onetimesecret/pull/2417
• Add health check endpoints with RabbitMQ monitoring in https://github.com/onetimesecret/onetimesecret/pull/2418
• Rename auth env vars to AUTH_*_ENABLED pattern in https://github.com/onetimesecret/onetimesecret/pull/2420
• Release v0.24: Authentication, Background Jobs, and Architecture Overhaul in https://github.com/onetimesecret/onetimesecret/pull/2421
• merge/main in https://github.com/onetimesecret/onetimesecret/pull/2424
• Merge develop: Bug fixes and test improvements in https://github.com/onetimesecret/onetimesecret/pull/2429
• Simplify CSRF: Remove shrimp code, use Rack::Protection only in https://github.com/onetimesecret/onetimesecret/pull/2428
• Add backend verification trigger from DNS widget in https://github.com/onetimesecret/onetimesecret/pull/2435
• Complete Familia v1→v2 data migration pipeline in https://github.com/onetimesecret/onetimesecret/pull/2436
• Add Kiba ETL migration pipeline spike for customer transform in https://github.com/onetimesecret/onetimesecret/pull/2448
• [#2422] Add migration pipeline library infrastructure in https://github.com/onetimesecret/onetimesecret/pull/2447
• [#2422] Data migration framework: three implementation approaches in https://github.com/onetimesecret/onetimesecret/pull/2449
• Add Release Drafter workflow for automated release notes in https://github.com/onetimesecret/onetimesecret/pull/2451
• Add transparent password migration from Redis to Rodauth in https://github.com/onetimesecret/onetimesecret/pull/2452
• [#2422] Data migration framework and schema-derived types in https://github.com/onetimesecret/onetimesecret/pull/2453
• Refactor email masking with Mail gem and improved TLD handling in https://github.com/onetimesecret/onetimesecret/pull/2469
• [#2422] Fix migration bugs, add billing_email support, legacy plan handling in https://github.com/onetimesecret/onetimesecret/pull/2470
• Sync main → develop: dependency updates and email masking security fix in https://github.com/onetimesecret/onetimesecret/pull/2475
• Add domain verification CLI commands with shared operations layer in https://github.com/onetimesecret/onetimesecret/pull/2472
• Reorganize migration infrastructure and upgrade scripts in https://github.com/onetimesecret/onetimesecret/pull/2476
• Add HMAC-based subscription federation for cross-region benefit sharing in https://github.com/onetimesecret/onetimesecret/pull/2477
• Address PR review feedback: Redis optimization and edge case handling in https://github.com/onetimesecret/onetimesecret/pull/2479
• Release: HMAC subscription federation, domain verification CLI, migration reorganization in https://github.com/onetimesecret/onetimesecret/pull/2478
• Add bin wrappers for frontend, scheduler, and Stripe webhooks in https://github.com/onetimesecret/onetimesecret/pull/2480

New Contributors

• @jhob101 made their first contribution in https://github.com/onetimesecret/onetimesecret/pull/1840
• @david-garcia-garcia made their first contribution in https://github.com/onetimesecret/onetimesecret/pull/1936
• @kh0mka made their first contribution in https://github.com/onetimesecret/onetimesecret/pull/2130

Full Changelog: https://github.com/onetimesecret/onetimesecret/compare/v0.24.0-rc2b...v0.24.0-rc3