Release v2.1.1: CSP-safe password toggle icon visibility.

Author: HecFranco

docs/CHANGELOG.md

@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## Table of contents
 
 - [[Unreleased]](#unreleased)
+- [[2.1.1] - 2026-08-12](#211---2026-08-12)
 - [[2.1.0] - 2026-08-04](#210---2026-08-04)
 - [[2.0.5] - 2026-07-29](#205---2026-07-29)
 - [[2.0.4] - 2026-07-16](#204---2026-07-16)
@@ -32,10 +33,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.1.1] - 2026-08-12
+
 ### Fixed
 
 - **CSP-safe icon visibility:** hide/show eye icons via `is-password-visible` + `toggle_password.css` instead of inline `style="display: none"` / `element.style.display`. When `style-src` includes a nonce, browsers ignore `'unsafe-inline'`, so both icons were visible under strict CSP (e.g. Beacon). Demos aligned to the same class toggle (no Bootstrap `d-none`).
 
+[2.1.1]: https://github.com/nowo-tech/PasswordToggleBundle/releases/tag/v2.1.1
+
 ## [2.1.0] - 2026-08-04
 
 ### Added

docs/UPGRADING.md

@@ -2,7 +2,7 @@
 
 This document describes how to upgrade between major versions of Password Toggle Bundle.
 
-## Unreleased (CSP-safe icon visibility)
+## 2.1.1 (CSP-safe icon visibility)
 
 - **Load the bundle CSS** (`asset('css/toggle_password.css', 'nowo_password_toggle')` or import the SCSS). Icon show/hide now depends on `.icon-visible` / `.is-password-visible` rules in that stylesheet.
 - **Custom form theme overrides:** if you copied `toggle_password_widget.html.twig`, stop using inline `style.display` / `style: 'display: none'` / Bootstrap `d-none`. Toggle `is-password-visible` on the button (see the bundle widget) and keep both icons in the markup without inline hide styles.