[Sathvik-Rao]

Description

Improve clipboard sync reliability, simplify client settings, and expand
server administration across all platforms.

Desktop and Android

• Add periodic update checks with configurable update alerts.
• Save device preferences independently of successful login.
• Clarify login labels, advanced settings, and configuration help.
• Add desktop certificate and download-folder pickers.
• Add custom CA certificate bundle support on Android.
• Improve reconnection and connection status reporting.
• Preserve UTF-8 characters across P2P fragment boundaries and clean up
  abandoned fragment buffers.

Desktop reliability and packaging

• Improve macOS clipboard monitoring, shutdown, and native quit handling.
• Fix Linux and macOS single-instance locking.
• Improve STOMP frame parsing and connection handshake handling.
• Prevent bundled OpenSSL conflicts in macOS builds.
• Install Python SSL certificates during macOS release builds.
• Add packaged macOS native-dependency and WebRTC initialization checks.
• Fix Linux CLI version-row alignment.

Server and web dashboard

• Add opt-in persistent login sessions for H2 and PostgreSQL.
• Add administrator session revocation and disconnect revoked live sockets.
• Add searchable, sortable, paginated admin tables and online-user visibility.
• Add system-aware light/dark styling and a theme toggle.
• Add configurable CAPTCHA difficulty and optional P2P signaling rate limits.
• Improve server version and update visibility.
• Expand API, client implementation, configuration, and build documentation.

Release tracking

Original feature PR: #182
Packaging workflow fix: #184
Artifact download fix: #185

This PR retries publication of the pending 3.3.0 release.

PR title format (required — enforced by CI)

<group>[+<group>...]: <description>

where each <group> is <type>[!](<scope>[,<scope>...]).

Type → bump

Type	Bump	Release?
feat! / fix! / <type>!	major	yes
feat	minor	yes
fix, perf	patch	yes
docs, chore, refactor, test, ci, build, style	none	no

Scope → platform (required for feat/fix/perf)

windows · macos · linux-gui · linux-cli · linux* · android · server · desktop* · all

* linux = both Linux variants. desktop = windows + macos + both linux.
Linux GUI and CLI are tracked separately for versioning but share one package artifact.

Mixed bumps

Join groups with + to describe different types of changes:

• feat(server)+fix(windows): backend rewrite + tray crash
• feat!(android)+feat(server)+fix(desktop): rework crypto

The highest bump across all groups advances the global release version
(major > minor > patch). Every selected platform adopts that version;
unselected platforms keep their existing versions and packages.

Rules

• A scope may appear in only one group across the title.
• Releasing and non-releasing types cannot be mixed.
• Non-releasing types take no scope.

Examples

• feat(server): add OIDC login
• fix(windows,macos): clipboard race on paste
• feat!(android): rework key derivation
• feat(server)+fix(windows): ...
• docs: update README ← no release

Checklist

• PR title matches the format above
• Description filled in (becomes the release "What's New")
• Each scope lists every platform actually changed — no more, no less
• Tested locally on the platforms in scope
• Breaking change? ! is in the title AND impact is described below
• No secrets, keystores, or .env files added to the diff

Breaking changes (if any)