release: v0.17.0 (#677)

See CHANGELOG.md, section [0.17.0] — 2026-09-23.

.env.local.example

@@ -68,6 +68,12 @@ AUTH_SECRET=change-me-to-a-long-random-string
 # Leave unset or empty to disable the admin UI entirely.
 # ADMIN_PASSWORD=your-secure-admin-password
 
+# ── Development over the LAN (next dev only) ──────────────────────
+# `next dev` refuses its own assets to any hostname but localhost, so the
+# page never hydrates when opened as http://192.168.1.20:3000. List the
+# hostnames or IPs you open it from, comma-separated. No effect in production.
+# ALLOWED_DEV_ORIGINS=192.168.1.20,myhost.local
+
 # ── Site URL ─────────────────────────────────────────────────────
 # Used for sitemap.xml, the feed and structured data when `url:` is not
 # set in settings.yaml. The settings file takes precedence, so the admin