openvibers/openvibe.network Commits

Pins: openvibe-shared 1.16.1 -> 1.17.1 (release notifications)

OP OpenVibers committed 26 Sept 2026 · 2b3998cf94 · 3 files, +7 −5

CSP connect-src also allows https://events.openvibe.network, where release-watch opens its EventSource on the Events realtime stream (host.release.published). Nothing else in the policy changes.

Changes

ddiff --git a/package-lock.json b/package-lock.json
iindex 9ef3c6cc..9a6c0f8b 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -22,7 +22,7 @@
          "multer": "^1.4.5-lts.1",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.56.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.11.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
          "uuid": "^11.1.0",
          "web-push": "^3.6.7"
        }
@@@ -1490,9 +1490,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "1.16.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
--      "integrity": "sha512-IB7/BBdIuDrpyLa4OqdoFu2hlkDEQhMvXCs7jqWC9BWlyWxDQbps/FpYqqIDENo5r+/MuNXQf1VAXCHXNwtpsA==",
++      "version": "1.17.1",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
++      "integrity": "sha512-IDwLw3PUxtqXS35QD0pnklsqHD+grHPk9RGpMJgihMXoY46+W5bcPO/2MN8AlCjHaO0WyNp0gYfp02il8Dy+rg==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/package.json b/package.json
iindex 911d19ac..a848d592 100644
---- a/package.json
++++ b/package.json
@@@ -25,7 +25,7 @@
      "multer": "^1.4.5-lts.1",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.56.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.11.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
      "uuid": "^11.1.0",
      "web-push": "^3.6.7"
    }
ddiff --git a/server/index.js b/server/index.js
iindex a2f4ea07..1b441cea 100644
---- a/server/index.js
++++ b/server/index.js
@@@ -143,6 +143,8 @@ app.use(helmet({
                  "https://openvibe.community",
                  "https://openvibe.blog",
                  "https://cloudflareinsights.com", // Cloudflare Web Analytics reports here (see script-src)
++                // Release notifications: release-watch's EventSource on the Events realtime stream (openvibe-shared 1.17)
++                "https://events.openvibe.network",
              ],
              frameSrc: ["'none'"],
              scriptSrcAttr: ["'unsafe-inline'"],