fix(i18n): replace hardcoded module installer errors with TranslationProvider

fix(security): prevent Zip Slip path traversal in module installation

fix(security): escape CDR CallerID data in DataTables to prevent stored XSS

fix(security): harden Lua WAF — decode query args, inspect POST body, detect double-encoding

fix(i18n): replace hardcoded syslog error strings with TranslationProvider

fix(security): patch auth bypass, XSS, RCE, path traversal, arbitrary file write

fix(auth): pass client IP in login notification email (#1017)

fix(mail): voicemail notification missing attachment (#1013)

fix(system): raise file descriptor limits to support high call volume

fix(lua): prevent cascading dialplan failure when file descriptors exhausted

fix(network): replace legacy route command with ip route for static routes

fix(ui): use direct blur handler for DID allowAdditions dropdown commit

fix(ui): use direct blur handler for DID allowAdditions dropdown commit

fix(ssh,ui): resolve SSH key application failure and DID save button activation

fix(ui): widen numberbeginswith input for longer patterns

fix(advice,routes): resolve stale password warning and pattern truncation

fix(dialplan): skip outgoing routes with null providerid

fix(asterisk): raise file descriptor limit to 65535 for high call volume

fix(i18n): correct Russian spelling Параноя → Паранойя

refactor(sounds): auto-resolve Asterisk-to-web language code mapping

feat(sounds): add Opus format to sound file conversion pipeline

feat: add tts-generator skill for multilingual voice prompt generation

fix(upload,cdr,security): chunk size, CEL guard, rate limit whitelist

fix(dhcp): don't clear DNS on DHCP deconfig to preserve user settings