Tommaso Casaburi
715acb4c9a
chore(deps): bump axios, protobufjs, and brace-expansion for Dependabot alerts
...
Resolve open security advisories by pinning patched versions in Yarn resolutions.
2026-07-22 12:09:03 +07:00
Tommaso Casaburi
32dea15e86
chore: upgrade react-grab to 0.1.48
2026-07-19 14:44:32 +07:00
Tommaso Casaburi
e6dc405faf
chore: upgrade react-doctor to 0.8.1
2026-07-19 14:35:27 +07:00
Tommaso Casaburi
bbc2d5860d
chore(release): v0.9.15
2026-07-17 16:37:51 +07:00
Tommaso Casaburi
d0c515e70f
fix(deps): upgrade @libp2p/gossipsub to 16.0.4 for CVE-2026-49866
...
Resolves Dependabot alert #302 (CPU DoS via oversized IHAVE/IWANT arrays).
2026-07-17 15:03:51 +07:00
Tommaso Casaburi
e14efac63a
chore(deps): upgrade bitsocial-react-hooks to 0.1.30 and bso-resolver to 0.0.10
2026-07-14 16:43:34 +07:00
Tommaso Casaburi
8cf425717b
chore(release): v0.9.14
2026-07-14 14:54:02 +07:00
Tommaso Casaburi
3d49781c3d
chore(deps): upgrade bitsocial-react-hooks to 0.1.29
2026-07-14 14:14:09 +07:00
Tommaso Casaburi
2068894cbd
chore(deps): upgrade pkc-js to 0.0.71
2026-07-14 14:04:41 +07:00
Tommaso Casaburi
1e9cdab9a6
chore(deps): bump pkc and hooks packages
2026-07-10 20:26:23 +07:00
Tommaso Casaburi
ece58da78b
chore(deps): drop @typescript/native-preview in favor of typescript 7 native tsc
...
TypeScript 7's own tsc is the Go-native compiler, so the separate tsgo
binary from the dev-preview package is redundant. yarn type-check now
runs tsc --noEmit. Bump tsconfig target to ES2018 and add types: [node]
to fix the pre-existing NodeJS namespace, global, and /s regex flag
errors that stable tsc reports but tsgo did not.
2026-07-09 15:17:35 +07:00
Tommaso Casaburi
217fccf2d6
chore: upgrade typescript to 7.0.2
2026-07-09 14:46:00 +07:00
Tommaso Casaburi
6753f4b3e6
fix(deps): satisfy yauzl API for Windows packaging
2026-07-09 00:57:27 +07:00
Tommaso Casaburi
ba4e2f42cc
chore(release): v0.9.13
2026-07-09 00:41:54 +07:00
Tommaso Casaburi
c6dadc6355
fix(deps): replace vulnerable decompress with @xhmikosr/decompress
...
The unmaintained decompress package (<=4.2.1) allows archive extraction
outside the target directory. Migrate electron before-pack to the patched
@xhmikosr/decompress fork (11.1.3) to resolve Dependabot alert #301 .
2026-07-08 21:44:18 +07:00
Tommaso Casaburi
1e1de76f8f
chore(deps): upgrade bitsocial-react-hooks to 0.1.27
2026-07-08 15:18:30 +07:00
Tommaso Casaburi
bf0577ab13
chore(deps): upgrade pkc-js to 0.0.65
2026-07-08 15:18:10 +07:00
Tommaso Casaburi
6c9c57794c
chore(release): v0.9.12
2026-07-06 23:46:18 +07:00
Tommaso Casaburi
57310867ec
chore(release): v0.9.11
2026-07-03 01:43:41 +07:00
Tommaso Casaburi
19530d1d99
Revert "chore(release): v0.9.11"
...
This reverts commit 6fb4adc0b2
2026-07-02 16:18:10 +07:00
Tommaso Casaburi
6fb4adc0b2
chore(release): v0.9.11
2026-07-02 16:15:24 +07:00
Tommaso Casaburi
5aaee154d2
chore(deps): bump pkc and hooks packages
2026-06-29 20:18:44 +07:00
Tommaso Casaburi
e52aa3a44f
chore(release): v0.9.10
2026-06-29 10:07:32 +07:00
Tommaso Casaburi
3b3a5a5e6c
chore(release): v0.9.9
2026-06-29 00:44:49 +07:00
Tommaso Casaburi
deb7c841b7
chore(deps): upgrade bitsocial-react-hooks to 0.1.25
2026-06-29 00:41:39 +07:00
Tommaso Casaburi
1de28afd45
chore(deps): upgrade bitsocial-react-hooks to 0.1.24
2026-06-28 23:22:11 +07:00
Tommaso Casaburi
6e361e224d
chore(deps): upgrade pkc-js to 0.0.59
2026-06-28 22:57:57 +07:00
Tommaso Casaburi
b974be7b2f
chore(release): v0.9.8
2026-06-27 18:46:31 +07:00
Tommaso Casaburi
9c269d9dfa
chore(deps): upgrade bitsocial-react-hooks to 0.1.23
2026-06-27 14:23:56 +07:00
Tommaso Casaburi
87f73d7268
chore(deps): upgrade pkc-js to 0.0.57
2026-06-27 14:23:36 +07:00
Tommaso Casaburi
31197bb7e0
chore(release): v0.9.7
2026-06-26 10:24:21 +07:00
Tommaso Casaburi
ca2473ef48
chore(release): v0.9.6
2026-06-25 23:56:10 +07:00
Tommaso Casaburi
23706a86db
chore(release): v0.9.5
2026-06-25 19:49:21 +07:00
Tommaso Casaburi
466e0fee87
chore(deps): upgrade bitsocial packages
2026-06-25 18:06:54 +07:00
Tommaso Casaburi and GitHub
f1022fc2d9
fix: consume enriched account comments directly ( #1178 )
...
* fix: consume enriched account comments directly
* fix(account comments): use empty lookup patch
2026-06-24 16:23:42 +07:00
Tommaso Casaburi
7f193b479b
fix(deps): bump vulnerable transitive dependencies for Dependabot alerts
...
Resolve 17 open alerts by pinning patched versions of vite, undici, ws, protobufjs, tar, js-yaml, @babel/core, form-data, and tmp.
2026-06-23 17:28:24 +07:00
Tommaso Casaburi
87df18162c
chore(release): v0.9.4
2026-06-18 19:07:21 +07:00
Tommaso Casaburi and GitHub
eb47214f08
Fix empty board loading state and browser P2P patch ( #1175 )
...
* fix(board): show loaded empty boards
* fix(p2p): patch browser hooks runtime
* fix(board): stop flash loading for explicit empty boards
* fix(board): wait for feed on preloaded empty pages
2026-06-18 18:54:48 +07:00
Tommaso Casaburi
3a4a0d4130
fix(electron): add BSO name resolvers for desktop board address resolution
...
Configure desktop PKC RPC with Ethereum-backed BSO resolvers so .bso board addresses resolve correctly.
2026-06-18 15:59:15 +07:00
Tommaso Casaburi
de06d5d4bc
chore(release): v0.9.3
2026-06-17 23:13:33 +07:00
Tommaso Casaburi
1278cf42c0
fix(pubsub): restore browser pure p2p publishing
2026-06-17 23:09:39 +07:00
Tommaso Casaburi
f7771d33dd
chore(release): v0.9.3
2026-06-16 22:51:09 +07:00
Tommaso Casaburi
10015de6b9
fix(pubsub): avoid false browser p2p provider failures
2026-06-16 22:48:09 +07:00
Tommaso Casaburi
1fed20a471
chore: upgrade knip to 6.17.0
2026-06-16 17:21:20 +07:00
Tommaso Casaburi
88b44dc3a3
chore(deps): upgrade bitsocial-react-hooks to 0.1.18
2026-06-15 18:40:24 +07:00
Tommaso Casaburi
ded239bef2
chore(release): v0.9.2
2026-06-13 18:09:24 +07:00
Tommaso Casaburi and GitHub
85b782e934
feat(electron): sign and notarize mac release builds ( #1171 )
...
* feat(electron): sign and notarize mac release builds when Apple credentials are present
* fix(electron): work around codesign PID parsing for digit-leading app name in @electron/notarize
codesign interprets a bare '5chan.app' argument as process ID 5, so
@electron/notarize 2.5.0's pre-upload signature check fails with 'No such
process'. Backport the './' basename prefix from electron/notarize#245 as
a yarn patch until forge depends on notarize >= 3.x.
* docs(agent-playbooks): record codesign PID parsing surprise for digit-leading app name
* fix(ci): keep mac signing env consistent with certificate availability
2026-06-13 15:26:31 +07:00
Tommaso Casaburi
43b160b1fc
fix: resolve open Dependabot security alerts
...
Bump vulnerable transitive dependencies via yarn resolutions and direct dependency updates.
2026-06-13 12:55:31 +07:00
Tommaso Casaburi
c3d72e53cc
chore: upgrade react-doctor to 0.5.2
2026-06-13 12:42:11 +07:00
Tommaso Casaburi
44cc792a9a
chore(deps): upgrade bitsocial-react-hooks to 0.1.17
2026-06-12 18:42:35 +07:00
Tommaso Casaburi