Tommaso Casaburi
f2f6c0ecb7
fix(deps): deduplicate pkc-js for Windows packaging
2026-07-30 02:31:16 +08:00
Tommaso Casaburi
5d595a9812
chore(release): v0.9.16
2026-07-30 01:57:49 +08:00
Tommaso Casaburi
de47749c52
chore(deps): upgrade react-router-dom to 7.18.1 for Dependabot alerts
...
Clears GHSA-wrjc-x8rr-h8h6 (open redirect via backslash in <Link>/useNavigate)
and GHSA-337j-9hxr-rhxg (arbitrary constructor injection in deserializeErrors),
neither of which has a 6.x backport. Drops the now-unused @remix-run/router
resolution, since v7 no longer depends on it.
2026-07-26 16:06:48 +07:00
Tommaso Casaburi
8ac0d68bfd
chore(deps): bump transitive deps to clear dependabot alerts
...
Raise resolution pins to the patched versions for 14 open Dependabot
alerts (1 critical, 8 high, 5 medium):
- brace-expansion 1.1.14 -> 1.1.16, 2.1.0 -> 2.1.2, 5.0.7 -> 5.0.8 (DoS)
- tar 7.5.16 -> 7.5.22 (decompression DoS, infinite loop, PAX crashes)
- postcss 8.5.15 -> 8.5.23 (source map path traversal)
- fast-uri 3.1.2 -> 3.1.4 (host confusion)
- sharp 0.34.5 -> 0.35.3 (inherited libvips CVEs)
- shell-quote 1.8.4 -> 1.9.0 (quadratic parse DoS)
- js-yaml 4.2.0 -> 4.3.0 (merge-key CPU exhaustion)
The two react-router advisories (GHSA-wrjc-x8rr-h8h6, GHSA-337j-9hxr-rhxg)
are not addressed: they are only patched in 7.18.0 and 6.30.4 is the final
v6 release, so clearing them needs a v6 -> v7 migration.
2026-07-25 14:02:33 +07:00
Tommaso Casaburi and GitHub
c437b59850
chore(deps): upgrade bitsocial-react-hooks to 0.1.32 ( #1188 )
2026-07-25 13:51:30 +07:00
Tommaso Casaburi and GitHub
a91c5b588b
fix(community status): use sync lifecycle for availability ( #1187 )
...
* chore(deps): upgrade pkc-js to 0.0.72 and bitsocial-react-hooks to 0.1.31
Update bitsocial internals import paths for the new package dist layout.
* fix(community status): use sync lifecycle for availability
* fix(community status): handle terminal sync without cache
* fix(directory routing): resolve candidate sync aliases
* fix(directory routing): preserve fresh cached winners
2026-07-24 16:36:09 +07:00
Tommaso Casaburi
01e5bdf19a
chore(deps): upgrade @chenglou/pretext to 0.0.8
...
Update pretext height estimation to use layoutNextLineRange from the new release.
2026-07-22 12:37:03 +07:00
Tommaso Casaburi
715acb4c9a
chore(deps): bump axios, protobufjs, and brace-expansion for Dependabot alerts
...
Resolve open security advisories by pinning patched versions in Yarn resolutions.
2026-07-22 12:09:03 +07:00
Tommaso Casaburi
32dea15e86
chore: upgrade react-grab to 0.1.48
2026-07-19 14:44:32 +07:00
Tommaso Casaburi
e6dc405faf
chore: upgrade react-doctor to 0.8.1
2026-07-19 14:35:27 +07:00
Tommaso Casaburi
bbc2d5860d
chore(release): v0.9.15
2026-07-17 16:37:51 +07:00
Tommaso Casaburi
d0c515e70f
fix(deps): upgrade @libp2p/gossipsub to 16.0.4 for CVE-2026-49866
...
Resolves Dependabot alert #302 (CPU DoS via oversized IHAVE/IWANT arrays).
2026-07-17 15:03:51 +07:00
Tommaso Casaburi
e14efac63a
chore(deps): upgrade bitsocial-react-hooks to 0.1.30 and bso-resolver to 0.0.10
2026-07-14 16:43:34 +07:00
Tommaso Casaburi
8cf425717b
chore(release): v0.9.14
2026-07-14 14:54:02 +07:00
Tommaso Casaburi
3d49781c3d
chore(deps): upgrade bitsocial-react-hooks to 0.1.29
2026-07-14 14:14:09 +07:00
Tommaso Casaburi
2068894cbd
chore(deps): upgrade pkc-js to 0.0.71
2026-07-14 14:04:41 +07:00
Tommaso Casaburi
1e9cdab9a6
chore(deps): bump pkc and hooks packages
2026-07-10 20:26:23 +07:00
Tommaso Casaburi
ece58da78b
chore(deps): drop @typescript/native-preview in favor of typescript 7 native tsc
...
TypeScript 7's own tsc is the Go-native compiler, so the separate tsgo
binary from the dev-preview package is redundant. yarn type-check now
runs tsc --noEmit. Bump tsconfig target to ES2018 and add types: [node]
to fix the pre-existing NodeJS namespace, global, and /s regex flag
errors that stable tsc reports but tsgo did not.
2026-07-09 15:17:35 +07:00
Tommaso Casaburi
217fccf2d6
chore: upgrade typescript to 7.0.2
2026-07-09 14:46:00 +07:00
Tommaso Casaburi
6753f4b3e6
fix(deps): satisfy yauzl API for Windows packaging
2026-07-09 00:57:27 +07:00
Tommaso Casaburi
ba4e2f42cc
chore(release): v0.9.13
2026-07-09 00:41:54 +07:00
Tommaso Casaburi
c6dadc6355
fix(deps): replace vulnerable decompress with @xhmikosr/decompress
...
The unmaintained decompress package (<=4.2.1) allows archive extraction
outside the target directory. Migrate electron before-pack to the patched
@xhmikosr/decompress fork (11.1.3) to resolve Dependabot alert #301 .
2026-07-08 21:44:18 +07:00
Tommaso Casaburi
1e1de76f8f
chore(deps): upgrade bitsocial-react-hooks to 0.1.27
2026-07-08 15:18:30 +07:00
Tommaso Casaburi
bf0577ab13
chore(deps): upgrade pkc-js to 0.0.65
2026-07-08 15:18:10 +07:00
Tommaso Casaburi
6c9c57794c
chore(release): v0.9.12
2026-07-06 23:46:18 +07:00
Tommaso Casaburi
57310867ec
chore(release): v0.9.11
2026-07-03 01:43:41 +07:00
Tommaso Casaburi
19530d1d99
Revert "chore(release): v0.9.11"
...
This reverts commit 6fb4adc0b2
2026-07-02 16:18:10 +07:00
Tommaso Casaburi
6fb4adc0b2
chore(release): v0.9.11
2026-07-02 16:15:24 +07:00
Tommaso Casaburi
5aaee154d2
chore(deps): bump pkc and hooks packages
2026-06-29 20:18:44 +07:00
Tommaso Casaburi
e52aa3a44f
chore(release): v0.9.10
2026-06-29 10:07:32 +07:00
Tommaso Casaburi
3b3a5a5e6c
chore(release): v0.9.9
2026-06-29 00:44:49 +07:00
Tommaso Casaburi
deb7c841b7
chore(deps): upgrade bitsocial-react-hooks to 0.1.25
2026-06-29 00:41:39 +07:00
Tommaso Casaburi
1de28afd45
chore(deps): upgrade bitsocial-react-hooks to 0.1.24
2026-06-28 23:22:11 +07:00
Tommaso Casaburi
6e361e224d
chore(deps): upgrade pkc-js to 0.0.59
2026-06-28 22:57:57 +07:00
Tommaso Casaburi
b974be7b2f
chore(release): v0.9.8
2026-06-27 18:46:31 +07:00
Tommaso Casaburi
9c269d9dfa
chore(deps): upgrade bitsocial-react-hooks to 0.1.23
2026-06-27 14:23:56 +07:00
Tommaso Casaburi
87f73d7268
chore(deps): upgrade pkc-js to 0.0.57
2026-06-27 14:23:36 +07:00
Tommaso Casaburi
31197bb7e0
chore(release): v0.9.7
2026-06-26 10:24:21 +07:00
Tommaso Casaburi
ca2473ef48
chore(release): v0.9.6
2026-06-25 23:56:10 +07:00
Tommaso Casaburi
23706a86db
chore(release): v0.9.5
2026-06-25 19:49:21 +07:00
Tommaso Casaburi
466e0fee87
chore(deps): upgrade bitsocial packages
2026-06-25 18:06:54 +07:00
Tommaso Casaburi and GitHub
f1022fc2d9
fix: consume enriched account comments directly ( #1178 )
...
* fix: consume enriched account comments directly
* fix(account comments): use empty lookup patch
2026-06-24 16:23:42 +07:00
Tommaso Casaburi
7f193b479b
fix(deps): bump vulnerable transitive dependencies for Dependabot alerts
...
Resolve 17 open alerts by pinning patched versions of vite, undici, ws, protobufjs, tar, js-yaml, @babel/core, form-data, and tmp.
2026-06-23 17:28:24 +07:00
Tommaso Casaburi
87df18162c
chore(release): v0.9.4
2026-06-18 19:07:21 +07:00
Tommaso Casaburi and GitHub
eb47214f08
Fix empty board loading state and browser P2P patch ( #1175 )
...
* fix(board): show loaded empty boards
* fix(p2p): patch browser hooks runtime
* fix(board): stop flash loading for explicit empty boards
* fix(board): wait for feed on preloaded empty pages
2026-06-18 18:54:48 +07:00
Tommaso Casaburi
3a4a0d4130
fix(electron): add BSO name resolvers for desktop board address resolution
...
Configure desktop PKC RPC with Ethereum-backed BSO resolvers so .bso board addresses resolve correctly.
2026-06-18 15:59:15 +07:00
Tommaso Casaburi
de06d5d4bc
chore(release): v0.9.3
2026-06-17 23:13:33 +07:00
Tommaso Casaburi
1278cf42c0
fix(pubsub): restore browser pure p2p publishing
2026-06-17 23:09:39 +07:00
Tommaso Casaburi
f7771d33dd
chore(release): v0.9.3
2026-06-16 22:51:09 +07:00
Tommaso Casaburi
10015de6b9
fix(pubsub): avoid false browser p2p provider failures
2026-06-16 22:48:09 +07:00
Tommaso Casaburi