Release 2.4.2

Fixes the nine findings of a security audit of 2.4.1. The most
important: an anonymous uploader could fill the storage quota without
sending data, and a forged X-Forwarded-For header could get around the
limits on password attempts. Password attempts now also have a limit
per share, per login e-mail and for the system password.

Whoever entered the system password enters it once more after the
update. Update now: docker compose pull and docker compose up -d.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

config/app.php

@@ -25,6 +25,6 @@ return [
     |
     */
 
-    'version' => '2.4.1',
+    'version' => '2.4.2',
 
 ];