Create changelog for version 4.1.2 with new features, improvements, and bug fixes

src/routes/(docs)/docs.json

@@ -311,6 +311,10 @@
                   "group": "v4.x",
                   "collapsible": false,
                   "pages": [
+                    {
+                      "title": "v4.1.2",
+                      "content": "v4/changelogs/v4.1.2"
+                    },
                     {
                       "title": "v4.1.1",
                       "content": "v4/changelogs/v4.1.1"

src/routes/(docs)/docs/content/v4/changelogs/v4.1.2.md

@@ -0,0 +1,41 @@
+---
+title: v4.1.2 Changelog
+description: See what's new in Kener v4.1.2, including new features, improvements, and bug fixes
+---
+
+## New features {#new-features}
+
+### DNS-over-TLS for DNS monitors {#dns-over-tls}
+
+DNS monitors can now query resolvers over an encrypted connection. A new **`transport`** option (`UDP`, default, or `TLS`) enables DNS-over-TLS (RFC 7858) with supporting fields:
+
+- **`tlsPort`** (default `853`) — the DoT port on the resolver.
+- **`tlsServername`** — TLS SNI hostname, needed when pointing at an IP-based resolver like `1.1.1.1`.
+- **`allowSelfSignedCert`** — skip TLS verification for private resolvers.
+
+UDP lookups with a blank `nameServer` also got smarter: Kener now walks the zone's authoritative nameservers before falling back to `8.8.8.8`. See [DNS Monitor](/docs/v4/monitors/dns).
+
+### Redirect control for API monitors {#api-follow-redirects}
+
+API monitors gained a **Follow Redirects** toggle (default on) and a **Max Redirects** limit (default 5, up to 20). Turn the toggle off to evaluate the redirect response itself — its `3xx` status code and headers — instead of the destination, useful for monitoring that a redirect is in place or catching unexpected ones.
+
+## Improvements {#improvements}
+
+### Self-signed TLS for gRPC monitors {#grpc-insecure-tls}
+
+gRPC monitors with TLS enabled can now set **`insecure`** to skip certificate verification — the equivalent of `grpcurl -insecure` — for servers with self-signed certificates. See [gRPC Monitor](/docs/v4/monitors/grpc).
+
+### `external_url` in the monitors API {#external-url-api}
+
+The monitors API now accepts `external_url` in `POST` and `PATCH /api/v4/monitors` requests and returns it in monitor responses, so API-managed monitors can set their public link without a dashboard visit.
+
+### New and updated translations {#translations}
+
+Two new locales: **Traditional Chinese (Hong Kong)** `zh-HK` and **Traditional Chinese (Macau)** `zh-MO`. Simplified Chinese, Traditional Chinese (Taiwan), and Vietnamese translations were also refreshed.
+
+## Bug fixes {#bug-fixes}
+
+- **Incident comments notify subscribers.** Incidents created or updated from the dashboard or API never reached email subscribers — only alert-driven incidents did. Posting a comment on an incident now notifies "incidents" subscribers regardless of where the incident came from, and alert-driven incidents notify exactly once through the same path. Notification subjects now carry the incident state (e.g. `INVESTIGATING`).
+- **Site theme respected on first visit.** The default color scheme configured in site settings is now applied to first-time visitors instead of only after they toggle the theme.
+- **Favicon works with `KENER_BASE_PATH`.** The favicon now resolves correctly when Kener is served from a sub-path, and pages no longer break when no favicon is configured.
+- **Charts re-render on id changes.** Chart container ids are now reactive, fixing stale chart styling when a chart's id changes after mount.