v0.21.0

## 0.21.0 - 2026-10-11

**Highlights:** opt-in full-history pairing, live presence events, media retry filters, and Go standard-library security fixes.

- Auth: add opt-in full-history pairing and history day, per-chat, and size limits, with validation before creating named accounts. Thanks @zarmat99 (#442, #461).
- Presence: add contact subscriptions and presence/typing events, with bounded reconnect renewal and sync delegation. Thanks @zarmat99 (#451).
- Messages: retain per-recipient delivery/read receipts and expose counts in message queries, preserving identities through phone/LID reconciliation. Thanks @zarmat99 (#440).
- Media: add `media retry --type` to recover one kind of media, including voice notes with `--type audio`, while applying chat/date filters and row limits to matching messages. Thanks @zarmat99 (#450).
- Contacts: delegate `contacts check` to a running `sync --follow` process so registration lookups no longer fail on the store lock. Thanks @ceifa (#453, #425).
- Builds: use Go 1.27.2 for its standard-library security fixes across development, CI, Docker, and release verification, retaining the Go 1.27.0 source minimum.
- CI: attribute vulnerability findings to the vulnerable module rather than its callers, preserving standard-library failures and separate third-party notices.
- Dependencies: refresh whatsmeow, eligible Go modules, and pnpm 12.10.1 after the 48-hour cooldown; retain Go and Node minimums.
- Dependencies: update pnpm to 12.9.1, the dead-code checker to x/tools 0.51.0, and PostgreSQL and GraphQL tooling parsers after the 48-hour cooldown, preserving Go and Node minimums.
- Docs: explain read-only MCP wrappers, command mapping, store locks, media output, and local health checks. Thanks @wacli-me (#434).
- Release: verify the macOS 15.0 minimum on every Darwin binary slice before signing and publication.