Commits

main

An edit that does not send citations keeps them: the /write editor does not resend a post's citations, so every edit made there dropped them from the new revision. Sending a list (even an empty one) still replaces them. lifecycle testOpenVibers · 24 Sept 2026 0784b42
openvibe-publishing v0.2.2 (shares the openvibe-shared v1.5.1 copy instead of installing v1.0.0 alongside)OpenVibers · 24 Sept 2026 a994d8a
SECURITY.md: how to report a vulnerability ([email protected], 7-day reply, scope, supported versions)OpenVibers · 24 Sept 2026 2c716a2
openvibe-shared v1.5.1, openvibe-contracts v0.33.0OpenVibers · 23 Sept 2026 d9c7005
openvibe-shared v1.5.0 (Track R release manifest), openvibe-contracts v0.32.0, openvibe-sdk v0.5.0OpenVibers · 23 Sept 2026 c64bc83
Members-only posts through OpenVibe.VIP: the blog owner's members read, everyone else gets a teaser and a join link, never the bodyOpenVibers · 23 Sept 2026 95e99ac
CI: run the shared security workflow (gitleaks secret scan + dependency audit, Track Q)OpenVibers · 23 Sept 2026 9078214
Docs: STATUS.json and README match production (2026-09-23)OpenVibers · 23 Sept 2026 8fa441e
App and module tokens act only for their on_behalf_of person; sandbox tokens refusedOpenVibers · 23 Sept 2026 e7b4986
nginx: client address headers only from $remote_addr (realip). X-Forwarded-For was appended to and CF-Connecting-IP passed through from the client, so a request reaching the origin without Cloudflare (DNS-only host or the bare IP) chose the address the service bans and rate-limits byOpenVibers · 23 Sept 2026 b4ccd8d
openvibe-publishing v0.2.1 (ReDoS fixes in ssr markdown)OpenVibers · 23 Sept 2026 8618b6d
Security: draft and private series/category names stay off public pages; unpublishing hides the comment thread; /auth/me is no-storeOpenVibers · 23 Sept 2026 f8498f3
STATUS: deployed on its domain 2026-09-23 (alpha); Sites placeholder removedOpenVibers · 23 Sept 2026 75d9ef2
openvibe-contracts v0.19.0 (this service's manifest and capabilities are released); contracts check is blockingOpenVibers · 23 Sept 2026 c5a4921
README (purpose, owns, does not own, depends on, acceptance, launch rule, threat review), STATUS alpha W16, .env.example, deploy (systemd unit, nginx vhost on 4810), CI on Node 22.22.1 (contracts check continue-on-error until release), capability and service manifest proposalsOpenVibers · 23 Sept 2026 402b000
OpenVibe.Blog service (Wave 16): official and member blogs on openvibe-publishing v0.2.0OpenVibers · 23 Sept 2026 8b248d5
Charter: OpenVibe.Blog as defined in the OpenVibe realignment plan (placeholder, no code yet)OpenVibers · 21 Sept 2026 ed35c44