@@ -1,3 +1,12 @@
+Version 2.0.1
+
+	Fixed an unauthenticated server crash when a multipart file part omits
+		the name attribute. Unnamed file parts are ignored before memory
+		or disk upload handling. Thanks to AllenYen for the private report.
+	Corrected the documentation include path and graph font configuration.
+	Fixed release-note extraction on macOS and made the ABI packaging gate
+		use the configured patch version while retaining SONAME 2.
+
 Version 2.0.0
 
 	Fixed macOS CI failure when verifying the pinned libmicrohttpd
 
@@ -38,7 +38,7 @@ endif
 
 endif
 
-EXTRA_DIST = libhttpserver.pc.in $(DX_CONFIG) scripts/extract-release-notes.sh scripts/validate-version.sh \
+EXTRA_DIST = libhttpserver.pc.in $(DX_CONFIG) scripts/extract-release-notes.sh scripts/test_extract_release_notes.sh scripts/validate-version.sh \
 	scripts/check-examples.sh scripts/check-readme.sh scripts/check-release-notes.sh \
 	scripts/check-doxygen.sh scripts/check-hooks-doc-spotcheck.sh \
 	scripts/check-soversion.sh \
@@ -414,6 +414,7 @@ check-readme:
 
 # TASK-042: static checks on RELEASE_NOTES.md — see scripts/check-release-notes.sh
 check-release-notes:
+	@$(top_srcdir)/scripts/test_extract_release_notes.sh
 	@echo "=== check-release-notes: enforce TASK-042 invariants on RELEASE_NOTES.md ==="
 	@$(top_srcdir)/scripts/check-release-notes.sh
 
 
@@ -22,7 +22,7 @@
 AC_PREREQ(2.57)
 m4_define([libhttpserver_MAJOR_VERSION],[2])dnl
 m4_define([libhttpserver_MINOR_VERSION],[0])dnl
-m4_define([libhttpserver_REVISION],[0])dnl
+m4_define([libhttpserver_REVISION],[1])dnl
 m4_define([libhttpserver_PKG_VERSION],[libhttpserver_MAJOR_VERSION.libhttpserver_MINOR_VERSION.libhttpserver_REVISION])dnl
 m4_define([libhttpserver_LDF_VERSION],[libhttpserver_MAJOR_VERSION:libhttpserver_MINOR_VERSION:libhttpserver_REVISION])dnl
 AC_INIT([libhttpserver], libhttpserver_PKG_VERSION, [electrictwister2000@gmail.com])
 
@@ -1348,7 +1348,7 @@ SEARCH_INCLUDES        = YES
 # contain include files that are not input files but should be processed by
 # the preprocessor.
 
-INCLUDE_PATH           =
+INCLUDE_PATH           = $(SRCDIR)/src
 
 # You can use the INCLUDE_FILE_PATTERNS tag to specify one or more wildcard
 # patterns (like *.h and *.hpp) to filter out the header-files in the
@@ -1479,7 +1479,7 @@ DOT_NUM_THREADS        = 0
 # DOTFONTPATH environment variable or by setting DOT_FONTPATH to the directory
 # containing the font.
 
-DOT_FONTNAME           = FreeSans.ttf
+DOT_FONTNAME           = Helvetica
 
 # The DOT_FONTSIZE tag can be used to set the size of the font of dot graphs.
 # The default size is 10pt.
 
@@ -6,16 +6,16 @@
 # that the on-disk layout matches the v2.0 SOVERSION contract:
 #
 #   A1. `make install DESTDIR=$STAGE` succeeds.
-#   A2. On Linux: $libdir/libhttpserver.so.2.0.0 exists as a regular file.
+#   A2. On Linux: $libdir/libhttpserver.so.<package-version> exists as a regular file.
 #       On Darwin: $libdir/libhttpserver.2.dylib exists as a regular file.
 #       (Note: with libtool's `-version-number A:B:C` on Darwin, only the
 #       major-numbered .2.dylib is produced. Linux produces the full
 #       three-file chain .so / .so.2 / .so.2.0.0.)
 #   A3. On Linux: $libdir/libhttpserver.so.2 exists and is a symlink that
-#       (transitively) resolves to libhttpserver.so.2.0.0.
+#       (transitively) resolves to libhttpserver.so.<package-version>.
 #       On Darwin: skipped (no intermediate symlink layer on Mach-O).
 #   A4. On Linux: $libdir/libhttpserver.so dev symlink exists and resolves
-#       to libhttpserver.so.2.0.0.
+#       to libhttpserver.so.<package-version>.
 #       On Darwin: $libdir/libhttpserver.dylib dev symlink exists and
 #       resolves to libhttpserver.2.dylib.
 #   A5. SONAME / install-name: on Linux `readelf -d` must report
@@ -24,7 +24,7 @@
 #       HARD prerequisite — if it is absent the script FAILS (rather than
 #       degrading to a filename-only check), so an under-provisioned CI lane
 #       can never mask a broken SONAME behind a green signal.
-#   A6. pkg-config: `pkg-config --modversion libhttpserver` prints 2.0.0,
+#   A6. pkg-config: `pkg-config --modversion libhttpserver` prints the configured package version,
 #       `--cflags` includes -I.../include, `--libs` includes -lhttpserver.
 #   A7. libhttpserver.la was installed and lists library_names that include
 #       the SONAME (libhttpserver.so.2 on Linux or libhttpserver.2.dylib on
@@ -90,6 +90,11 @@ if [ ! -d "$BUILD_DIR" ]; then
     fail "BUILD_DIR=$BUILD_DIR does not exist; run ./configure first"
 fi
 
+# Package metadata follows the configured patch release; the ABI SONAME stays 2.
+PACKAGE_VERSION="$(sed -n 's/^VERSION = //p' "$BUILD_DIR/Makefile")"
+[[ "$PACKAGE_VERSION" =~ ^2\.[0-9]+\.[0-9]+$ ]] \
+    || fail "expected configured v2 package version, got '$PACKAGE_VERSION'"
+
 CONFIG_STATUS="$BUILD_DIR/config.status"
 if [ ! -x "$CONFIG_STATUS" ]; then
     fail "$CONFIG_STATUS not found; run ./configure in $BUILD_DIR first"
@@ -133,10 +138,10 @@ STAGE_INC="$STAGE$INCDIR"
 # ---- A2/A3/A4: platform-specific filename + symlink checks --------------------
 case "$PLATFORM" in
     Linux)
-        FULL="$STAGE_LIB/libhttpserver.so.2.0.0"
+        FULL="$STAGE_LIB/libhttpserver.so.$PACKAGE_VERSION"
         SONAME_LINK="$STAGE_LIB/libhttpserver.so.2"
         DEV_LINK="$STAGE_LIB/libhttpserver.so"
-        FULL_BASENAME="libhttpserver.so.2.0.0"
+        FULL_BASENAME="libhttpserver.so.$PACKAGE_VERSION"
         SONAME_BASENAME="libhttpserver.so.2"
         HAS_INTERMEDIATE_SONAME_LINK=yes
         ;;
@@ -232,8 +237,8 @@ if command -v pkg-config >/dev/null 2>&1; then
         || fail "A6: pkg-config --exists libhttpserver failed"
 
     modver="$(PKG_CONFIG_PATH="$PC_DIR" pkg-config --modversion libhttpserver)"
-    [ "$modver" = "2.0.0" ] \
-        || fail "A6: pkg-config --modversion = '$modver', expected '2.0.0'"
+    [ "$modver" = "$PACKAGE_VERSION" ] \
+        || fail "A6: pkg-config --modversion = '$modver', expected '$PACKAGE_VERSION'"
 
     # `pkg-config --cflags` reports the canonical (installed, not DESTDIR'd)
     # include path; we just verify the canonical $INCDIR appears, NOT
@@ -250,7 +255,7 @@ if command -v pkg-config >/dev/null 2>&1; then
         *"-lhttpserver"*) ;;
         *) fail "A6: pkg-config --libs missing -lhttpserver ; got: $libs" ;;
     esac
-    pass "A6: pkg-config reports modversion=2.0.0 and consistent -I/-l flags"
+    pass "A6: pkg-config reports modversion=$PACKAGE_VERSION and consistent -I/-l flags"
 else
     # pkg-config is a hard CI prerequisite: the literal Version-line grep
     # fallback only proved the .pc string, never that pkg-config could parse
 
@@ -27,7 +27,7 @@ if [ -z "$VERSION" ]; then
         }
         found && /^$/ && !started { next }
         found { started = 1; print }
-    ' "$CHANGELOG" | sed -e :a -e '/^[[:space:]]*$/{ $d; N; ba; }'
+    ' "$CHANGELOG" | sed -e ':a' -e '/^[[:space:]]*$/ {' -e '$d' -e 'N' -e 'ba' -e '}'
 else
     # Extract notes for the specific version
     awk -v ver="$VERSION" '
@@ -40,5 +40,5 @@ else
         }
         found && /^$/ && !started { next }
         found { started = 1; print }
-    ' "$CHANGELOG" | sed -e :a -e '/^[[:space:]]*$/{ $d; N; ba; }'
+    ' "$CHANGELOG" | sed -e ':a' -e '/^[[:space:]]*$/ {' -e '$d' -e 'N' -e 'ba' -e '}'
 fi
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+set -euo pipefail
+REPO_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+cd "$REPO_ROOT"
+fixture="$(mktemp -d)"
+trap 'rm -rf "$fixture"' EXIT
+printf 'Version 2.0.1\n\nFix crash.\n\nRetain paragraph.\n\n\nVersion 2.0.0\n\nPrior release.\n\n' > "$fixture/ChangeLog"
+printf 'Fix crash.\n\nRetain paragraph.\n' > "$fixture/new"
+printf 'Prior release.\n' > "$fixture/old"
+for version in '' 2.0.1 v2.0.1; do
+ CHANGELOG="$fixture/ChangeLog" scripts/extract-release-notes.sh "$version" > "$fixture/actual"
+ cmp "$fixture/new" "$fixture/actual"
+done
+CHANGELOG="$fixture/ChangeLog" scripts/extract-release-notes.sh 2.0.0 > "$fixture/actual"
+cmp "$fixture/old" "$fixture/actual"
+printf 'Release extraction fixture PASS\n'