[inpt333]

Why

Self-hosters get demo mode, the BMI fix, and the Ash security updates only from a release.

What changed

• CHANGELOG.md: the Unreleased entries become 0.3.0 (2026-10-26), plus the notable changes since 0.2.0: searchable timezone list, page actions in the heading, the BMI and waist-to-hip fix, food preference labels, language kept on sign-in and sign-out, and the dependency CVE fixes.
• mix.exs: version 0.3.0.
• deploy/compose.yaml, deploy/.env.example and docs/self-hosting.md: pin 0.3.0.

After merge, I tag v0.3.0 on main. That publishes the 0.3.0, 0.3 and latest images. I then create the GitHub release from the changelog section.

Checklist

• mix precommit, pnpm assets:check, and pnpm assets:typecheck pass locally. (Version and docs only.)
• Changes to Ash resources include the generated migrations and resource snapshots (mix ash.codegen). (None.)
• New user-facing text is translated into English and Spanish. (None.)
• No real patient data, credentials, or licensed terminology content is included.

🤖 Generated with Claude Code