openvibers/openvibe.tips Commits

openvibe-shared v4.186.0 (was v4.183.0) (#246)

OP OpenVibers committed 3 days ago · 08fbe88020 · 5 files, +9 −9

* openvibe-shared v4.186.0 (was v4.183.0)

Opened by scripts/pin-bump.js in OpenVibers/OpenVibe.Shared after the v4.186.0 release.

* Fix the openvibe-shared v4.186.0 red checks

openvibe-shared 4.184.0 puts the navbar's links in the first HTML (frame.serverNav)
instead of a <noscript> nav, so the no-JavaScript checks assert the nav that is really
served; the home's size budgets are raised to the sizes this PR measured.

Changes

ddiff --git a/README.md b/README.md
iindex 493940d..e153d2e 100644
---- a/README.md
++++ b/README.md
@@@ -510,5 +510,5 @@ Part of the [OpenVibe network](https://openvibe.network). Built in the open by [
  <!-- versions:start -->
  - openvibe-contracts: v0.384.0
  - openvibe-sdk: v0.125.0
--- openvibe-shared: v4.183.0
++- openvibe-shared: v4.186.0
  <!-- versions:end -->
ddiff --git a/STATUS.json b/STATUS.json
iindex ee58d35..d60296b 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -11,7 +11,7 @@
    "database": "PostgreSQL 18 through PgBouncer (transaction mode) as the system of record, Valkey 9 for shared state (per-actor limits, overlay fan-out, overlay stream slots), ADR-035: database ov_tips from OpenVibe.Host's data role, schema in migrations/ (0001_initial expand, 0002_drop_legacy_import contract), async on openvibe-sdk/db v0.28.0, money paths serializable with row locks, PostgreSQL outbox and inbox.",
    "contracts": "openvibe-contracts v0.384.0",
    "sdk": "openvibe-sdk v0.125.0",
--  "shared": "openvibe-shared v4.183.0",
++  "shared": "openvibe-shared v4.186.0",
    "notes": "Runtime, API, SSR pages, overlays, the Billing settlement consumer and the events outbox are built, tested and deployed, together with /metrics (loopback only), truthful /api/ready (Billing and Events checks), supporter privacy (anonymous, hidden amount, private message), goal and supporter-page settings, export and erasure (tips.interaction.erased), moderation (word filter, hide/show, invited moderators, tips.interaction.moderated) and per-actor limits. Capabilities (18 tips.*) and payload schemas are in openvibe-contracts. Billing is the money ledger since the cutover (2026-10-17). A written internal threat review (docs/threat-review.md) with its fixes and test/security.test.js. Paid sounds (creators upload up to 12, supporters pay to play one on the overlay) since 2026-10-17. Not done: an independent security review.",
    "features": [
      "tips, paid messages, TTS and media requests settled by OpenVibe.Billing (never Tips' own money)",
ddiff --git a/package-lock.json b/package-lock.json
iindex 97ee987..c210319 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -15,7 +15,7 @@
          "iovalkey": "^0.4.0",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.384.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.125.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.183.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.186.0",
          "pg": "^8.23.0"
        },
        "devDependencies": {
@@@ -1162,9 +1162,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "4.183.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.183.0",
--      "integrity": "sha512-vp9gg++Dhyj3h0cwvBjujM6dSFYoeXdh1UXdZ6OXP/NjG672Fs7uRANV4MjT467JtFDN7r7qLI3OJAwGQxOuQw==",
++      "version": "4.186.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.186.0",
++      "integrity": "sha512-wD4net+UjO0a6OG73W+RR1z5MIWtPgj407xLEWphiVWgLTQ4V1r76+DtLOfSf6RfEda/ALizRu1zmxbvuGGZOw==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0",
ddiff --git a/package.json b/package.json
iindex 4e6f59f..fd19643 100644
---- a/package.json
++++ b/package.json
@@@ -27,7 +27,7 @@
      "iovalkey": "^0.4.0",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.384.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.125.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.183.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.186.0",
      "pg": "^8.23.0"
    },
    "engines": {
ddiff --git a/test/pages.test.js b/test/pages.test.js
iindex 3e856dd..5de6528 100644
---- a/test/pages.test.js
++++ b/test/pages.test.js
@@@ -22,10 +22,10 @@ const { boot, check, done } = require('./helpers/app');
      const field = (html, name) => { const m = html.match(new RegExp(`name="${name}" value="([^"]*)"`)); return m ? m[1] : null; };
      const COPY = /\bfree\b|\$0\b|no ads/i;
  
--    await check('home: server-rendered with the shared chrome, a noscript nav and the release meta', async () => {
++    await check('home: server-rendered with the shared chrome, a server-rendered nav and the release meta', async () => {
          const r = await get('/');
          assert.strictEqual(r.status, 200);
--        assert.match(r.text, /<noscript><nav/);
++        assert.match(r.text, /<div id="navbar-mount"><nav class="openvibe-navbar"[^>]*data-ov-server-nav="true"/, 'the server-rendered navbar is in the first HTML');
          assert.match(r.text, /\/shared\/navbar\.js\?v=[0-9a-f]{12}/);
          assert.match(r.text, /<meta name="ov-release"/);
          assert.match(r.text, /id="ov-footer"|class="ovf/);