The importBoard method reached direct collection writers without first requiring an authenticated user, allowing a network client with no account or token to create imported board data and placeholder users. importBoard and importScoped now complete Meteor’s mandatory type checks, then reject logged-out callers before feature checks, parsers or creators can run. Scoped imports carry the authenticated method user explicitly. Denied attempts are attributed by connection address in Admin Panel / Problems. Source-level and logged-out browser regression tests cover the guard and no-write outcome. See GHSA-qp32-wqxw-wq3h and ImportBleed.

The Puppeteer list-regression suite now waits for a connected DDP session before resume-token login and bounds the token callback, reactive identity settlement and entire suite. A stalled fresh second session fails with its URL, DDP status, user id and login state instead of pausing all tests indefinitely. Regression coverage keeps every wait bounded and diagnostic.

The Khmer and Russian hyphenated locale aliases again point to their underscored Transifex targets. Translation pulls therefore update the files loaded by the app instead of leaving materialized copies stale. The former copies were byte-identical to their targets, so no translation was lost; lazy-loading and new-language wiring tests pin both aliases as symlinks.

The placeholder-only local-memory tool now derives versioned protocol labels from each language’s established IP-address translation, preserving its word order and changing only the universal protocol token. It filled 282 rendered labels across 141 language tags (268 stored values plus seven locale aliases). Two obsolete English sentences were reset to the current source so future fills can see them, and wrong-script analysis now ignores only exact IPv4 and IPv6 identifiers while continuing to inspect surrounding prose. Regression tests pin the ambiguity guard, placeholder protection and narrow protocol-token exception.

All twelve translatable report labels and descriptions now cover eleven Chinese language tags, using simplified or traditional script to match each existing locale. Product and protocol terms such as REST API, IPv4, IPv6 and WITH_API=true remain recognizable. Regression coverage checks every translated key, both scripts and the intentionally universal API labels.

All twelve report labels and descriptions now cover three Japanese and two Korean language tags, following each family’s established login and address vocabulary. REST API, IPv4, IPv6 and WITH_API=true remain recognizable. Regression coverage checks every translated key, both writing systems and the intentionally universal API labels.

All twelve report labels and descriptions now cover four Russian and two Ukrainian language tags, following each family’s established login and address vocabulary. REST API, IPv4, IPv6 and WITH_API=true remain recognizable. Regression coverage checks every translated key, both languages and the intentionally universal API labels.

All twelve report labels and descriptions now use distinct Belarusian and Bulgarian vocabulary in Cyrillic script. REST API, IPv4, IPv6 and WITH_API=true remain recognizable. Regression coverage checks every translated key, both languages and the intentionally universal API labels.

All twelve report labels and descriptions now cover the Arabic, Algerian, Egyptian and Moroccan tags in Arabic script. REST API, IPv4, IPv6 and WITH_API=true remain recognizable. Regression coverage checks every translated key, all four right-to-left tags, Arabic-script content and the intentionally universal API labels.

All twelve report labels and descriptions now cover two Hebrew and two Persian language tags in their respective right-to-left scripts. REST API, IPv4, IPv6 and WITH_API=true remain recognizable. Regression coverage checks every translated key, both scripts and the intentionally universal API labels.

All twelve report labels and descriptions now cover two Hindi tags in Devanagari and one Gujarati tag in Gujarati script. REST API, IPv4, IPv6 and WITH_API=true remain recognizable. Regression coverage checks every translated key, both scripts and the intentionally universal API labels.

All twelve report labels and descriptions now cover both Greek language tags in Greek script. REST API, IPv4, IPv6 and WITH_API=true remain recognizable. Regression coverage checks every translated key, Greek-script content and the intentionally universal API labels.

All twelve translatable report labels and descriptions now use Khmer vocabulary across the three Khmer language tags. API, REST API, IPv4, IPv6 and WITH_API=true remain recognizable. Regression coverage checks every translated key, Khmer script, variant consistency and the intentionally universal literals.

All twelve translatable report labels and descriptions now use Vietnamese across both language tags, following their established login, report and endpoint vocabulary. API, REST API, IPv4, IPv6 and WITH_API=true remain recognizable. Regression coverage checks every translated key, variant consistency and the intentionally universal literals.