v3.2.4 - Hardening & CI Improvements

- Atomic writes in store_secret() to prevent corruption
- Restic --retry-lock 5m on all lock-acquiring operations
- Pre-install validation for dev updates
- Post-restore verification for database and files
- ShellCheck static analysis in CI
- Version-tag validation in release pipeline
- Fix escape_json() for tabs and carriage returns
- Remove dead verify_file_integrity() function
- 14 new unit tests (169 total)

v3.2.3 - Test Suite & CI/CD Pipeline

- Comprehensive test suite: 291 bats-core tests (155 unit + 136 integration)
- CI workflow: syntax + unit tests on every push to develop/main
- Release workflow: automated tarball, SHA256SUMS, GitHub release, SLSA attestation

v3.2.2 - Cron Fallback Scheduler & CLI Fixes

- Cron Fallback Scheduler (BACKUPD-038)
- CLI Trap Scope Fix (BACKUPD-037)
- Exit Code Masking Fix (BACKUPD-037)
- Restore Script Path Fix (BACKUPD-037)
- List Backups Fix (BACKUPD-037)
- Status Command Fix (BACKUPD-037)

v3.2.1 - Schedule Templates, Bulk Operations & Signal Handling

- Schedule Templates/Presets (BACKUPD-035)
- Bulk Schedule Operations (BACKUPD-034)
- Schedule Conflict Auto-Suggest (BACKUPD-033)
- Signal Handling for Child Processes (BACKUPD-036)

v3.2.0 - Per-Job Scheduling & FlashPanel Support

Per-Job Scheduling via CLI:
- backupd job schedule <job> <type> <schedule> command
- --show, --disable, --json, --all flags
- Schedule validation and conflict detection
- Interactive schedule menu
- enable_job() timer recreation fix

FlashPanel Detection:
- Auto-detect FlashPanel with service/binary fallback
- Non-isolated mode: /home/flashpanel/*
- Isolated mode: /home/*/*
- Panel selection menu options
- Mode override prompt in setup

Technical:
- 25 commits (BACKUPD-008 through BACKUPD-032)
- +873 lines across 9 files
- Full backward compatibility

v3.1.4 - Multi-Distribution Support

- Multi-distribution package manager support (apt, dnf, yum, pacman, apk, zypper)
- wget fallback for all HTTP operations
- Explicit sha256sum and base64 dependency checks
- Improved unsupported distribution handling
- Cross-distro argon2, bzip2, and unzip installation

v3.1.3 - Bug Fixes

27 bug fixes across 11 files:
- Logging & debug improvements
- Core path validation and network checks
- Crypto security (machine ID, atomic writes)
- Generator sed escaping
- History JSON escaping and date parsing
- Restore cleanup traps
- Schedule display and service handling
- CLI argument validation and temp cleanup
- Entry point symlink verification

Breaking: verify command -q shortcut removed (use --quick)

v3.1.2 - Security & Reliability Fixes

CRITICAL:
- Add 4 missing lib modules to dev-update array

Security:
- Path traversal protection for tar extraction
- Symlink attack prevention (cache moved to ~/.cache)
- TLS 1.2+ enforcement for all curl commands
- Regex injection prevention in checksum lookup

Reliability:
- HTTP connectivity check (replaces blocked ICMP ping)
- Download retry logic with exponential backoff
- Backup validation before updates proceed
- Safe rollback with rename-before-delete pattern
- Atomic updates via staging directory
- Syntax validation for dev updates
- JSON parsing with jq fallback
- Download timeouts
- Race condition prevention with flock
- Pre-release version comparison fix
- API failure logging

v3.1.1 - Patch Release

- Fix: Added missing v3.1.0 lib modules (history.sh, jobs.sh, migration.sh) to installer
- Fix: Added missing history.sh source to backupd.sh
- Docs: Added comprehensive history command documentation to USAGE.md and README.md

v3.1.0 - Multi-Job Support

- Multi-job backup management (create, delete, clone, run jobs)
- Each job has isolated config, scripts, and schedules
- Automatic migration from single-config to default job
- Job-aware history tracking
- Full backward compatibility with existing commands