0.60.2

## What's Changed
* fix: report the actual 1-based failed browser-step number (#4200) by @ebarkhordar in https://github.com/dgtlmoon/changedetection.io/pull/4258
* UI medium refactor by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4183
* Show regex-tagged watches under their group tab by @willyjfarrell in https://github.com/dgtlmoon/changedetection.io/pull/4267
* Watch history - fix for restock.previous_price returns the first-ever price once a watch has 3+ snapshots by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4268
* Fix LLM token counter race condition by @honma89 in https://github.com/dgtlmoon/changedetection.io/pull/4276
* fix: Visual Selector renders scraped selectors as text, not markup by @kah-ja in https://github.com/dgtlmoon/changedetection.io/pull/4282
* fix: sanitize lone unicode surrogates before filtering JSON by @snowyukitty in https://github.com/dgtlmoon/changedetection.io/pull/4293
* fix: invalidate favicon cache when clearing watch history by @snowyukitty in https://github.com/dgtlmoon/changedetection.io/pull/4286
* fix: avoid division by zero when logging watch load rate by @snowyukitty in https://github.com/dgtlmoon/changedetection.io/pull/4289
* UI - Move rendering of each watchlist row out of the watchlist main template so it can be re-used by the realtime update by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4305
* Security: hide the running version from anonymous visitors when a password is set (#2190) by @pongoe in https://github.com/dgtlmoon/changedetection.io/pull/4306
* Move development tools out of runtime requirements by @Nameless-Monster-Nerd in https://github.com/dgtlmoon/changedetection.io/pull/4280
* CSRF - Test fix by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4316
* feature: allow a watch or group to append to the inherited AI Change Summary prompt by @snowyukitty in https://github.com/dgtlmoon/changedetection.io/pull/4294
* RSS - RSS pubDate is wrong on any non-UTC container: local time is relabelled as UTC - #4309 by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4314
* GHSA-56fq-63vj-9992 Improved URL filtering by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4315
* GHSA-4j9m-cxq4-9c36 - Improved validation Stored CSS Injection via `tag_colour` Field by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4317
* Bump actions/setup-python from 6 to 7 in the all group across 1 directory by @dependabot[bot] in https://github.com/dgtlmoon/changedetection.io/pull/4291
* GHSA-23mp-8222-96fr - reflected XSS in /diff/<uuid>/download-patch via from_version - Using built-in plain text response instead. Reported-by: Mayssare Amakhtari (@cy3erm) Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4324
* LIBXML Data integrity fix, libxml must be locked across threads for any XML parsing by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4325
* Add Polish translation by @osaczony30 in https://github.com/dgtlmoon/changedetection.io/pull/4329
* Add Ukrainian support for the 'In stock'/'Not in stock' status by @iG8R in https://github.com/dgtlmoon/changedetection.io/pull/4330
* Add watch UI should show which browser(s) are available and set default browser by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4334
* feat: make Playwright CSP bypass configurable by @kquinsland in https://github.com/dgtlmoon/changedetection.io/pull/4298
* Restock detection - fix inverted condition that skipped the OpenGraph availability fallback by @TowyTowy in https://github.com/dgtlmoon/changedetection.io/pull/4262
* Add watch UI default browser by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4335
* fix: Browser Steps picker cannot select a <select> nested in a <div> by @thejdubb02 in https://github.com/dgtlmoon/changedetection.io/pull/4336
* deps: update litellm dependency cap by @apeabody in https://github.com/dgtlmoon/changedetection.io/pull/4341
* fix(backup): add utf-8 encoding when writing url list files by @apeabody in https://github.com/dgtlmoon/changedetection.io/pull/4345
* Puppeteer/Playwright CSP bypass - test refactor by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4346
* Python 3.10 EOL October/2026 - Dropping support - conflicts with jsonschema and litellm by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4347
* fix(llm): support reasoning models (<think>), safe booleans, and timestamp diffs by @apeabody in https://github.com/dgtlmoon/changedetection.io/pull/4340
* fix(llm): handle reasoning blocks that aren't a well-formed <think></think> pair by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4349
* Memory - GC freeze after startup to save CPU cycles and improve memory management by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4351
* Scheduler+API Bug - if an invalid timezone was set (through edit of watch or API) it could have crashed the scheduler, Added `timezone` to the official API docs by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4350
* Memory usage - small improvement by tidying up module imports by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4352
* UTF-8/Lone Surrogate encoding test improvements related to #4273 by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4353
* LLM - Per watch/group settings and UI tidyup by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4354
* Update - pyppeteer-ng to 2.0.0rc16 by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4357
* fix(llm): support Gemini flash-lite & reasoning models, strip extra_body on 400 retry by @apeabody in https://github.com/dgtlmoon/changedetection.io/pull/4342
* Watch loading - Dont crawl whole datastore on disk, just check each directory for `watch.json` / `tag.json` by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4358
* Env var - `PAGE_WATCH_LIMIT` enhancements by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4359
* Feature/watch limit by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4360
* fix(api): accept an existing tag UUID in the watch `tag` field, and deprecate it by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4361
* fix(conditions): support zero values in condition filtering and json logic conversion by @apeabody in https://github.com/dgtlmoon/changedetection.io/pull/4362

## New Contributors
* @willyjfarrell made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4267
* @honma89 made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4276
* @kah-ja made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4282
* @snowyukitty made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4293
* @pongoe made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4306
* @Nameless-Monster-Nerd made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4280
* @osaczony30 made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4329
* @iG8R made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4330
* @kquinsland made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4298
* @thejdubb02 made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4336

**Full Changelog**: https://github.com/dgtlmoon/changedetection.io/compare/0.55.8...0.60.1