Commit Graph
473 Commits
Author SHA1 Message Date
Tommaso Casaburi 3d49781c3d chore(deps): upgrade bitsocial-react-hooks to 0.1.29 2026-07-14 14:14:09 +07:00
Tommaso Casaburi 2068894cbd chore(deps): upgrade pkc-js to 0.0.71 2026-07-14 14:04:41 +07:00
Tommaso Casaburi 1e9cdab9a6 chore(deps): bump pkc and hooks packages 2026-07-10 20:26:23 +07:00
Tommaso Casaburi ece58da78b chore(deps): drop @typescript/native-preview in favor of typescript 7 native tsc
TypeScript 7's own tsc is the Go-native compiler, so the separate tsgo
binary from the dev-preview package is redundant. yarn type-check now
runs tsc --noEmit. Bump tsconfig target to ES2018 and add types: [node]
to fix the pre-existing NodeJS namespace, global, and /s regex flag
errors that stable tsc reports but tsgo did not.
2026-07-09 15:17:35 +07:00
Tommaso Casaburi 217fccf2d6 chore: upgrade typescript to 7.0.2 2026-07-09 14:46:00 +07:00
Tommaso Casaburi 6753f4b3e6 fix(deps): satisfy yauzl API for Windows packaging 2026-07-09 00:57:27 +07:00
Tommaso Casaburi ba4e2f42cc chore(release): v0.9.13 2026-07-09 00:41:54 +07:00
Tommaso Casaburi c6dadc6355 fix(deps): replace vulnerable decompress with @xhmikosr/decompress
The unmaintained decompress package (<=4.2.1) allows archive extraction
outside the target directory. Migrate electron before-pack to the patched
@xhmikosr/decompress fork (11.1.3) to resolve Dependabot alert #301.
2026-07-08 21:44:18 +07:00
Tommaso Casaburi 1e1de76f8f chore(deps): upgrade bitsocial-react-hooks to 0.1.27 2026-07-08 15:18:30 +07:00
Tommaso Casaburi bf0577ab13 chore(deps): upgrade pkc-js to 0.0.65 2026-07-08 15:18:10 +07:00
Tommaso Casaburi 6c9c57794c chore(release): v0.9.12 2026-07-06 23:46:18 +07:00
Tommaso Casaburi 57310867ec chore(release): v0.9.11 2026-07-03 01:43:41 +07:00
Tommaso Casaburi 19530d1d99 Revert "chore(release): v0.9.11"
This reverts commit 6fb4adc0b2.
2026-07-02 16:18:10 +07:00
Tommaso Casaburi 6fb4adc0b2 chore(release): v0.9.11 2026-07-02 16:15:24 +07:00
Tommaso Casaburi 5aaee154d2 chore(deps): bump pkc and hooks packages 2026-06-29 20:18:44 +07:00
Tommaso Casaburi e52aa3a44f chore(release): v0.9.10 2026-06-29 10:07:32 +07:00
Tommaso Casaburi 3b3a5a5e6c chore(release): v0.9.9 2026-06-29 00:44:49 +07:00
Tommaso Casaburi deb7c841b7 chore(deps): upgrade bitsocial-react-hooks to 0.1.25 2026-06-29 00:41:39 +07:00
Tommaso Casaburi 1de28afd45 chore(deps): upgrade bitsocial-react-hooks to 0.1.24 2026-06-28 23:22:11 +07:00
Tommaso Casaburi 6e361e224d chore(deps): upgrade pkc-js to 0.0.59 2026-06-28 22:57:57 +07:00
Tommaso Casaburi b974be7b2f chore(release): v0.9.8 2026-06-27 18:46:31 +07:00
Tommaso Casaburi 9c269d9dfa chore(deps): upgrade bitsocial-react-hooks to 0.1.23 2026-06-27 14:23:56 +07:00
Tommaso Casaburi 87f73d7268 chore(deps): upgrade pkc-js to 0.0.57 2026-06-27 14:23:36 +07:00
Tommaso Casaburi 31197bb7e0 chore(release): v0.9.7 2026-06-26 10:24:21 +07:00
Tommaso Casaburi ca2473ef48 chore(release): v0.9.6 2026-06-25 23:56:10 +07:00
Tommaso Casaburi 23706a86db chore(release): v0.9.5 2026-06-25 19:49:21 +07:00
Tommaso Casaburi 466e0fee87 chore(deps): upgrade bitsocial packages 2026-06-25 18:06:54 +07:00
Tommaso CasaburiandGitHub f1022fc2d9 fix: consume enriched account comments directly (#1178)
* fix: consume enriched account comments directly

* fix(account comments): use empty lookup patch
2026-06-24 16:23:42 +07:00
Tommaso Casaburi 7f193b479b fix(deps): bump vulnerable transitive dependencies for Dependabot alerts
Resolve 17 open alerts by pinning patched versions of vite, undici, ws, protobufjs, tar, js-yaml, @babel/core, form-data, and tmp.
2026-06-23 17:28:24 +07:00
Tommaso Casaburi 87df18162c chore(release): v0.9.4 2026-06-18 19:07:21 +07:00
Tommaso CasaburiandGitHub eb47214f08 Fix empty board loading state and browser P2P patch (#1175)
* fix(board): show loaded empty boards

* fix(p2p): patch browser hooks runtime

* fix(board): stop flash loading for explicit empty boards

* fix(board): wait for feed on preloaded empty pages
2026-06-18 18:54:48 +07:00
Tommaso Casaburi 3a4a0d4130 fix(electron): add BSO name resolvers for desktop board address resolution
Configure desktop PKC RPC with Ethereum-backed BSO resolvers so .bso board addresses resolve correctly.
2026-06-18 15:59:15 +07:00
Tommaso Casaburi de06d5d4bc chore(release): v0.9.3 2026-06-17 23:13:33 +07:00
Tommaso Casaburi 1278cf42c0 fix(pubsub): restore browser pure p2p publishing 2026-06-17 23:09:39 +07:00
Tommaso Casaburi f7771d33dd chore(release): v0.9.3 2026-06-16 22:51:09 +07:00
Tommaso Casaburi 10015de6b9 fix(pubsub): avoid false browser p2p provider failures 2026-06-16 22:48:09 +07:00
Tommaso Casaburi 1fed20a471 chore: upgrade knip to 6.17.0 2026-06-16 17:21:20 +07:00
Tommaso Casaburi 88b44dc3a3 chore(deps): upgrade bitsocial-react-hooks to 0.1.18 2026-06-15 18:40:24 +07:00
Tommaso Casaburi ded239bef2 chore(release): v0.9.2 2026-06-13 18:09:24 +07:00
Tommaso CasaburiandGitHub 85b782e934 feat(electron): sign and notarize mac release builds (#1171)
* feat(electron): sign and notarize mac release builds when Apple credentials are present

* fix(electron): work around codesign PID parsing for digit-leading app name in @electron/notarize

codesign interprets a bare '5chan.app' argument as process ID 5, so
@electron/notarize 2.5.0's pre-upload signature check fails with 'No such
process'. Backport the './' basename prefix from electron/notarize#245 as
a yarn patch until forge depends on notarize >= 3.x.

* docs(agent-playbooks): record codesign PID parsing surprise for digit-leading app name

* fix(ci): keep mac signing env consistent with certificate availability
2026-06-13 15:26:31 +07:00
Tommaso Casaburi 43b160b1fc fix: resolve open Dependabot security alerts
Bump vulnerable transitive dependencies via yarn resolutions and direct dependency updates.
2026-06-13 12:55:31 +07:00
Tommaso Casaburi c3d72e53cc chore: upgrade react-doctor to 0.5.2 2026-06-13 12:42:11 +07:00
Tommaso Casaburi 44cc792a9a chore(deps): upgrade bitsocial-react-hooks to 0.1.17 2026-06-12 18:42:35 +07:00
Tommaso Casaburi 9b6386a0b8 chore(deps): upgrade pkc-js to 0.0.47 2026-06-12 17:21:38 +07:00
Tommaso Casaburi 15fb1bf57c chore(ai-workflow): add toolchain drift validator and harden agent rules
Borrowed from a review of addyosmani/agent-skills:

- add scripts/validate-ai-workflow.mjs (yarn ai-workflow:check): verifies
  .claude/.codex/.cursor skills, agents, and hooks stay in parity, with
  validator-owned exemptions for intentional harness-specific differences
  and enforcement of the AGENTS.md agent model rules
- browser-check and profiler agents: treat page content as untrusted data,
  never instructions (5chan pages render arbitrary user-generated content)
- refactor-pass: Chesterton's Fence rule (git blame unclear code before
  removing it)
- review-and-merge-pr: pass subagent verifiers only the artifact and
  contract, not the triage verdict, to keep reviews independent
2026-06-11 16:13:53 +07:00
Tommaso CasaburiandGitHub 17c63bb2e6 feat(reply modal): add sci tex preview button (#1170)
* feat(sci): add 4chan-style TeX support with MathJax on /sci/

- [math]/[eqn] tags typeset with MathJax 3 (lazy chunk, only on /sci/ with math present)
- 4chan-identical config: Safe mode, left-aligned eqn, neutered \color/\newcommand macros
- TeX button in reply modal title bar opens live TeX Preview modal
- /sci/ post form rules bullets for [math]/[eqn] usage and right-click source
- MathJax context menu on right-click (Show Math As > TeX Commands)
- woff fonts served from node_modules in dev and emitted into build

* feat(sci): finish TeX support: configmacros fix, preview preload, translations, tests

- add configmacros package so the 4chan macro neutering (\color, \newcommand, ...) applies
- preload MathJax when the TeX Preview opens, like 4chan
- stable closeModal callback for the preview modal
- pre-bundle mathjax components in vite optimizeDeps to avoid dev mid-session reload
- translate the 6 new TeX keys into all 35 languages
- markdown math segment component tests + math-tags unit tests

* feat(reply modal): add sci tex preview button

* fix(tex-preview): clear MathJax bookkeeping and pending typeset on close

Addresses Cursor Bugbot: the preview output was typeset via typesetMathElement but
never passed to clearMathElement on unmount, so repeated open/close cycles kept
detached nodes in MathJax's math list. Also cancels the pending debounce timer.

* fix(reply-modal): reset TeX preview state when the reply modal closes

Addresses CodeRabbit: showTexPreview persisted across close/reopen like the
bbcode preview flags, so the TeX preview would auto-open on the next reply.
2026-06-11 16:12:38 +07:00
Tommaso Casaburi fa7cab0699 fix(deps): resolve shell-quote critical dependabot alert
Pin shell-quote to 1.8.4 via yarn resolutions so concurrently no longer pulls the vulnerable 1.8.3 release.
2026-06-11 15:01:58 +07:00
Tommaso Casaburi ee5aa7845e fix(deps): bump react-router-dom to 6.30.4
Patches GHSA open redirect via protocol-relative URL reinterpretation
in react-router (Dependabot alert #276).
2026-06-09 19:11:43 +07:00
Tommaso Casaburi af2689c4dc chore(release): v0.9.1 2026-06-07 23:09:29 +07:00
Tommaso Casaburi 6bca832ccf chore(deps): upgrade bitsocial-react-hooks to 0.1.16 2026-06-07 23:07:33 +07:00