2.0.19 - Plugin page completeness: full release history since 30 June,
plus GH release-notes narrative
    - Restored a multi-version `changelog=` block in `metadata.txt`
covering every release since the 30 June 2026 v2.0.14 baseline. Each
version is followed by full bullets; there are no bare
version-number-only lines, so plugins.qgis.org's "Changes" tab
auto-fills cleanly with the cumulative narrative rather than
empty/duplicated version rows.
    - Replaced the GitHub release bodies for v2.0.18 and v2.0.19 (`gh
release edit --notes`) so the github.com release page shows the actual
CHANGELOG.md narrative for each version rather than the auto-generated
commit/PR boilerplate produced by `gh release create
--generate-notes`.

    2.0.18 - Cleanup pass: tag-cap fix and full-block render
compatibility
    - Trimmed `tags=` from 43 entries down to the QGIS-Django
per-plugin cap of 5 broad terms
(`lidar,relief,visualization,dem,archaeology`) so `qgis-plugin-ci
release` no longer trips plugins.qgis.org's HTTP 400 (Bad Request) on
the upload endpoint. Confirmed by `--generate-notes` not being a
substitute for proper release notes.

    2.0.17 - Hardening pass: OpenMP determinism, dual changelog guard,
CI flake guard
    - Force `OMP_NUM_THREADS=1` in `point_cloud/csf_filter.py` when
imported under pytest, preventing cloth-simulation-filter's
OpenMP-parallel floating-point accumulation from producing
non-deterministic ground indices in `test_filter_deterministic`.
    - Extended `scripts/check_changelog.py` to also verify
`lidar_relief/metadata.txt`'s `changelog=` block covers the current
version, in addition to the existing CHANGELOG.md check.
Defense-in-depth against plugins.qgis.org's upload form auto-fill
overriding pasted release notes.
    - Added 3x cold-run determinism check to
`.github/workflows/tests.yml` full-tests job, with `--deselect` on the
main suite so the dedicated CIS guard is the sole owner of that test.
    - Added `changelog_url=` to `metadata.txt` so plugins.qgis.org
displays a "View full changelog" link to GitHub Releases.
    - Prepended missing 2.0.8-2.0.16 entries to the metadata.txt
`changelog=` block, fixing the previous pattern where
plugins.qgis.org's auto-fill was showing only the stale v2.0.7 view.

    2.0.16 - Fix QGIS Plugin Manager secrets detection false positive
    - QGIS Plugin Manager secrets detection false positives: added
Yelp's `detect-secrets` inline bypass comments (`# pragma: allowlist
secret`) to MapLibre GL JS and the custom COG protocol Subresource
Integrity (SRI) base64 hashes in `web_viewer.py` to prevent automated
submission blocks on plugins.qgis.org.

    2.0.15 - Bug fixes, performance optimizations, and documentation
update
    - RVT Topographic Openness: fixed missing `rvt.vis.openness` API
usage in `rvt_vis.py` by calling
`rvt.vis.sky_view_factor(compute_opns=True)` to align with the modern
`rvt-py` 2.x API.
    - RVT Multi-directional Hillshade: fixed shape mismatch crashing
tile processing by transposing outputs to `(height, width,
directions)` and fixing the 3D padding logic in `_unwrap_rvt_output`.
    - MSTP memory spikes: replaced O(N×M) `np.mgrid` coordinate grids
in `_window_stats` with 1D broadcasted arrays, reducing memory
footprints by gigabytes.
    - Flat-terrain standard deviation clamping: clamped flat-terrain
standard deviations to exactly `0.0` in `compute_dev` to avoid
micro-noise speckles.
    - Windows file locks: closed all GDAL Band and Dataset handles in
`process_in_tiles` before deleting files; used
`gdal.GetDriverByName("GTiff").Delete(path)` on cancel.
    - Auto-scaling for flat/all-zero rasters: fixed division-by-zero
warnings on flat inputs in `blend_algorithm.py`.
    - Azimuth parsing: wrapped parsing in `hillshade_algorithm.py` in
try/except for non-numeric azimuths.
    - GDAL BuildVRT failure check: added return validation in
`ml_export_algorithm.py` to prevent `NoneType` errors when `BuildVRT`
fails.
    - YOLOv5 postprocessing and label mapping: reordered
postprocessing checks in `ml/detector.py` to make YOLOv5 reachable and
fixed dictionary parsing for non-contiguous integer class mappings.
    - CSF point cloud conversion: replaced single-threaded point loops
in `point_cloud/csf_filter.py` with direct SWIG NumPy array transfers.
    - Multi-temporal transform compatibility: dynamic transform-object
checks in `temporal/dem_difference.py` (supports both `affine.Affine`
and standard GDAL 6-tuples).
    - QField field package compatibility: included standard XML
headers in exported QField project files.
    - Report generator percentiles: fixed statistics table requesting
P85 but computing P95 percentiles.
    - Web viewer CDN security: included Subresource Integrity (SRI)
hashes on all external CDN assets.

    2.0.14 - ImportError fix and changelog guard
    - Fixed ImportError crash at plugin init on QGIS 4.0.3:
`pdal_classify_algorithm.py` used the non-existent class name
`QgsProcessingParameterOutputString`; corrected to
`QgsProcessingOutputString` in both the `from qgis.core import (...)`
block and the `self.addOutput(...)` call site.
    - Added pre-commit + CI changelog guard
(`scripts/check_changelog.py`) to verify `CHANGELOG.md` covers the
`version=` in `metadata.txt`. Wired into `.pre-commit-config.yaml`,
`.github/workflows/release.yml`, and `test.sh` as a hard-fail step.
    - Pre-merge hardening pass: NumPy 2 deprecation compatibility
(`int8` → `int16` / `uint8` type promotions), rio-cogeo reprojection
alignment in CSF ground filter, and `field_packager` refactor.
    - Branch cleanup: merged stale `fix/v2.0.7-hardening-pass` branch
into `master` and deleted it. GitLab remote switched from HTTPS
token-auth to SSH.

None