g_variant_dup_strv() allocates a vector and duplicates every string.  The
generated completion helper copies that vector into the outgoing GVariant,
leaving the duplicated input unowned.  AddressSanitizer reports 360 direct
bytes and 420 indirect bytes leaked after five calls.

Pass the constant capability list directly to the helper instead.  This
avoids the temporary allocations while leaving the returned capabilities
unchanged.

Signed-off-by: Saverio Miroddi <saverio.pub2@gmail.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

When monitors change during network events, suspend/resume, or hotplug,
the daemon could use an invalid monitor index to look up the
notification stack, causing a segfault.

Validate the monitor index before use, and pass it directly when
creating stacks instead of re-querying.

Fixes #257

This allows us to open the notifications history through DBus, which
means we could configure a keybinding for it.

This reverts commit f0fc8d792b35ec3b5f76aaf5cf8f4d82707b939c.