openvibers/openvibe.tools Commits

Pins: openvibe-shared 1.16.1 -> 1.17.1 (release notifications)

OP OpenVibers committed 26 Sept 2026 · 4238494f52 · 24 files, +56 −48

CSP connect-src also allows https://events.openvibe.network, where release-watch opens its EventSource on the Events realtime stream (host.release.published). Nothing else in the policy changes.

Changes

ddiff --git a/apps/audio/package-lock.json b/apps/audio/package-lock.json
iindex cd62269..9cfcfce 100644
---- a/apps/audio/package-lock.json
++++ b/apps/audio/package-lock.json
@@@ -21,7 +21,7 @@
          "multer": "^1.4.5-lts.1",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.49.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.11.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
          "uuid": "^11.1.0"
        }
      },
@@@ -1184,9 +1184,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "1.16.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
--      "integrity": "sha512-IB7/BBdIuDrpyLa4OqdoFu2hlkDEQhMvXCs7jqWC9BWlyWxDQbps/FpYqqIDENo5r+/MuNXQf1VAXCHXNwtpsA==",
++      "version": "1.17.1",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
++      "integrity": "sha512-IDwLw3PUxtqXS35QD0pnklsqHD+grHPk9RGpMJgihMXoY46+W5bcPO/2MN8AlCjHaO0WyNp0gYfp02il8Dy+rg==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/apps/audio/package.json b/apps/audio/package.json
iindex ed80ec1..11a7ed9 100644
---- a/apps/audio/package.json
++++ b/apps/audio/package.json
@@@ -22,7 +22,7 @@
      "multer": "^1.4.5-lts.1",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.49.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.11.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
      "uuid": "^11.1.0"
    }
  }
ddiff --git a/apps/audio/server/index.js b/apps/audio/server/index.js
iindex 7bdd8bf..be31300 100644
---- a/apps/audio/server/index.js
++++ b/apps/audio/server/index.js
@@@ -100,7 +100,8 @@ app.use(helmet({
              fontSrc: ["'self'", "https://fonts.gstatic.com", "https://cdnjs.cloudflare.com"],
              imgSrc: ["'self'", "data:", "blob:", jobsRuntime.mediaOrigin()],     // job result previews are 302s to Media
              mediaSrc: ["'self'", "blob:", jobsRuntime.mediaOrigin()],
--            connectSrc: ["'self'", "https://openvibe.network", "https://*.openvibe.tools"],
++            // events.openvibe.network: release notifications (release-watch's EventSource, openvibe-shared 1.17).
++            connectSrc: ["'self'", "https://openvibe.network", "https://*.openvibe.tools", "https://events.openvibe.network"],
              workerSrc: ["'self'", "blob:"],
              scriptSrcAttr: ["'unsafe-inline'"],
          },
ddiff --git a/apps/docs/package-lock.json b/apps/docs/package-lock.json
iindex 08b879e..06d410d 100644
---- a/apps/docs/package-lock.json
++++ b/apps/docs/package-lock.json
@@@ -20,7 +20,7 @@
          "multer": "^1.4.5-lts.1",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.49.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.11.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
          "pdf-lib": "^1.17.1",
          "sharp": "^0.33.5",
          "uuid": "^11.1.0"
@@@ -1263,9 +1263,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "1.16.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
--      "integrity": "sha512-IB7/BBdIuDrpyLa4OqdoFu2hlkDEQhMvXCs7jqWC9BWlyWxDQbps/FpYqqIDENo5r+/MuNXQf1VAXCHXNwtpsA==",
++      "version": "1.17.1",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
++      "integrity": "sha512-IDwLw3PUxtqXS35QD0pnklsqHD+grHPk9RGpMJgihMXoY46+W5bcPO/2MN8AlCjHaO0WyNp0gYfp02il8Dy+rg==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/apps/docs/package.json b/apps/docs/package.json
iindex 2a6bdd3..a0f05dd 100644
---- a/apps/docs/package.json
++++ b/apps/docs/package.json
@@@ -21,7 +21,7 @@
      "multer": "^1.4.5-lts.1",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.49.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.11.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
      "pdf-lib": "^1.17.1",
      "sharp": "^0.33.5",
      "uuid": "^11.1.0"
ddiff --git a/apps/docs/server/index.js b/apps/docs/server/index.js
iindex 173866a..b7959c8 100644
---- a/apps/docs/server/index.js
++++ b/apps/docs/server/index.js
@@@ -116,7 +116,8 @@ app.use(helmet({
              styleSrc: ["'self'", "'unsafe-inline'", "https://cdnjs.cloudflare.com", "https://fonts.googleapis.com", "https://fonts.gstatic.com"],
              fontSrc: ["'self'", "https://fonts.gstatic.com", "https://cdnjs.cloudflare.com"],
              imgSrc: ["'self'", "data:", "blob:"],
--            connectSrc: ["'self'", "https://openvibe.network", "https://*.openvibe.tools"],
++            // events.openvibe.network: release notifications (release-watch's EventSource, openvibe-shared 1.17).
++            connectSrc: ["'self'", "https://openvibe.network", "https://*.openvibe.tools", "https://events.openvibe.network"],
              workerSrc: ["'self'", "blob:"],
              scriptSrcAttr: ["'unsafe-inline'"],
          },
ddiff --git a/apps/food/package-lock.json b/apps/food/package-lock.json
iindex 6a8d718..1acc3c7 100644
---- a/apps/food/package-lock.json
++++ b/apps/food/package-lock.json
@@@ -15,7 +15,7 @@
          "express": "^4.18.2",
          "express-rate-limit": "^7.1.5",
          "helmet": "^7.1.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1"
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1"
        }
      },
      "node_modules/accepts": {
@@@ -968,9 +968,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "1.16.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
--      "integrity": "sha512-IB7/BBdIuDrpyLa4OqdoFu2hlkDEQhMvXCs7jqWC9BWlyWxDQbps/FpYqqIDENo5r+/MuNXQf1VAXCHXNwtpsA==",
++      "version": "1.17.1",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
++      "integrity": "sha512-IDwLw3PUxtqXS35QD0pnklsqHD+grHPk9RGpMJgihMXoY46+W5bcPO/2MN8AlCjHaO0WyNp0gYfp02il8Dy+rg==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/apps/food/package.json b/apps/food/package.json
iindex aa1c11a..cba10e4 100644
---- a/apps/food/package.json
++++ b/apps/food/package.json
@@@ -16,6 +16,6 @@
      "better-sqlite3": "^11.0.0",
      "express-rate-limit": "^7.1.5",
      "helmet": "^7.1.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1"
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1"
    }
  }
ddiff --git a/apps/food/server/index.js b/apps/food/server/index.js
iindex 3465e96..1640f90 100644
---- a/apps/food/server/index.js
++++ b/apps/food/server/index.js
@@@ -84,7 +84,8 @@ app.use(helmet({
        styleSrc: ["'self'", "'unsafe-inline'", 'cdn.jsdelivr.net', 'unpkg.com', 'cdnjs.cloudflare.com', 'fonts.googleapis.com', 'fonts.gstatic.com'],
        fontSrc: ["'self'", 'fonts.gstatic.com', 'cdnjs.cloudflare.com'],
        imgSrc: ["'self'", 'data:', 'image.tmdb.org', '*.tile.openstreetmap.org', '*.basemaps.cartocdn.com', 'server.arcgisonline.com'],
--      connectSrc: ["'self'", 'nominatim.openstreetmap.org', 'https://openvibe.network'],
++      // events.openvibe.network: release notifications (release-watch's EventSource, openvibe-shared 1.17).
++      connectSrc: ["'self'", 'nominatim.openstreetmap.org', 'https://openvibe.network', 'https://events.openvibe.network'],
        scriptSrcAttr: ["'unsafe-inline'"],
      },
    },
ddiff --git a/apps/gateway/package-lock.json b/apps/gateway/package-lock.json
iindex be1a647..bff4cf4 100644
---- a/apps/gateway/package-lock.json
++++ b/apps/gateway/package-lock.json
@@@ -19,7 +19,7 @@
          "jsonwebtoken": "^9.0.0",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.49.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.11.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1"
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1"
        }
      },
      "node_modules/accepts": {
@@@ -1061,9 +1061,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "1.16.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
--      "integrity": "sha512-IB7/BBdIuDrpyLa4OqdoFu2hlkDEQhMvXCs7jqWC9BWlyWxDQbps/FpYqqIDENo5r+/MuNXQf1VAXCHXNwtpsA==",
++      "version": "1.17.1",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
++      "integrity": "sha512-IDwLw3PUxtqXS35QD0pnklsqHD+grHPk9RGpMJgihMXoY46+W5bcPO/2MN8AlCjHaO0WyNp0gYfp02il8Dy+rg==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/apps/gateway/package.json b/apps/gateway/package.json
iindex 870c5ef..cd6e2bd 100644
---- a/apps/gateway/package.json
++++ b/apps/gateway/package.json
@@@ -20,6 +20,6 @@
      "jsonwebtoken": "^9.0.0",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.49.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.11.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1"
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1"
    }
  }
ddiff --git a/apps/gateway/server/index.js b/apps/gateway/server/index.js
iindex 2c8a3c3..95c6153 100644
---- a/apps/gateway/server/index.js
++++ b/apps/gateway/server/index.js
@@@ -112,7 +112,8 @@ app.use(helmet({
              styleSrc: ["'self'", "'unsafe-inline'", "cdnjs.cloudflare.com", "fonts.googleapis.com", "fonts.gstatic.com"],
              fontSrc: ["'self'", "fonts.gstatic.com", "cdnjs.cloudflare.com"],
              imgSrc: ["'self'", "data:", "blob:", "https://openvibe.network", "https://openvibe.media"],
--            connectSrc: ["'self'", "https://cloudflareinsights.com", "https://openvibe.network", "https://openvibe.tools", "https://*.openvibe.tools", "https://openvibe.media", "https://openvibe.live", "https://openvibe.games"],
++            // events.openvibe.network: release notifications (release-watch's EventSource, openvibe-shared 1.17).
++            connectSrc: ["'self'", "https://cloudflareinsights.com", "https://openvibe.network", "https://openvibe.tools", "https://*.openvibe.tools", "https://openvibe.media", "https://openvibe.live", "https://openvibe.games", "https://events.openvibe.network"],
              frameSrc: ["https://openvibe.network"], // the hidden /sso/check sign-in probe
              scriptSrcAttr: ["'unsafe-inline'"],
          },
ddiff --git a/apps/img/package-lock.json b/apps/img/package-lock.json
iindex 156cf75..4fc6a64 100644
---- a/apps/img/package-lock.json
++++ b/apps/img/package-lock.json
@@@ -20,7 +20,7 @@
          "multer": "^1.4.5-lts.1",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.49.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.11.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
          "sharp": "^0.33.5",
          "to-ico": "^1.1.5",
          "uuid": "^11.1.0"
@@@ -1776,9 +1776,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "1.16.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
--      "integrity": "sha512-IB7/BBdIuDrpyLa4OqdoFu2hlkDEQhMvXCs7jqWC9BWlyWxDQbps/FpYqqIDENo5r+/MuNXQf1VAXCHXNwtpsA==",
++      "version": "1.17.1",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
++      "integrity": "sha512-IDwLw3PUxtqXS35QD0pnklsqHD+grHPk9RGpMJgihMXoY46+W5bcPO/2MN8AlCjHaO0WyNp0gYfp02il8Dy+rg==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/apps/img/package.json b/apps/img/package.json
iindex 14d6ec1..1abba67 100644
---- a/apps/img/package.json
++++ b/apps/img/package.json
@@@ -21,7 +21,7 @@
      "multer": "^1.4.5-lts.1",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.49.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.11.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
      "sharp": "^0.33.5",
      "to-ico": "^1.1.5",
      "uuid": "^11.1.0"
ddiff --git a/apps/img/server/index.js b/apps/img/server/index.js
iindex 9ea0367..16d8b37 100644
---- a/apps/img/server/index.js
++++ b/apps/img/server/index.js
@@@ -122,7 +122,8 @@ app.use(helmet({
              styleSrc: ["'self'", "'unsafe-inline'", "https://cdnjs.cloudflare.com", "https://fonts.googleapis.com", "https://fonts.gstatic.com"],
              fontSrc: ["'self'", "https://fonts.gstatic.com", "https://cdnjs.cloudflare.com"],
              imgSrc: ["'self'", "data:", "blob:", jobsRuntime.mediaOrigin()],   // job result previews are 302s to Media
--            connectSrc: ["'self'", "https://openvibe.network", "https://*.openvibe.tools"],
++            // events.openvibe.network: release notifications (release-watch's EventSource, openvibe-shared 1.17).
++            connectSrc: ["'self'", "https://openvibe.network", "https://*.openvibe.tools", "https://events.openvibe.network"],
              workerSrc: ["'self'", "blob:"],
              scriptSrcAttr: ["'unsafe-inline'"],
          },
ddiff --git a/apps/maps/package-lock.json b/apps/maps/package-lock.json
iindex d5a7d49..a4047ba 100644
---- a/apps/maps/package-lock.json
++++ b/apps/maps/package-lock.json
@@@ -19,7 +19,7 @@
          "express-rate-limit": "^7.5.0",
          "helmet": "^8.1.0",
          "node-cache": "^5.1.2",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1"
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1"
        }
      },
      "node_modules/accepts": {
@@@ -1383,9 +1383,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "1.16.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
--      "integrity": "sha512-IB7/BBdIuDrpyLa4OqdoFu2hlkDEQhMvXCs7jqWC9BWlyWxDQbps/FpYqqIDENo5r+/MuNXQf1VAXCHXNwtpsA==",
++      "version": "1.17.1",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
++      "integrity": "sha512-IDwLw3PUxtqXS35QD0pnklsqHD+grHPk9RGpMJgihMXoY46+W5bcPO/2MN8AlCjHaO0WyNp0gYfp02il8Dy+rg==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/apps/maps/package.json b/apps/maps/package.json
iindex 3e2887f..2ad7d31 100644
---- a/apps/maps/package.json
++++ b/apps/maps/package.json
@@@ -11,7 +11,7 @@
    "dependencies": {
      "axios": "^1.7.0",
      "better-sqlite3": "^11.0.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
      "cheerio": "^1.0.0-rc.12",
      "cookie-parser": "^1.4.7",
      "cors": "^2.8.5",
ddiff --git a/apps/maps/server/index.js b/apps/maps/server/index.js
iindex 683714a..b03138d 100644
---- a/apps/maps/server/index.js
++++ b/apps/maps/server/index.js
@@@ -78,7 +78,8 @@ app.use(helmet({
        scriptSrc: ["'self'", "'unsafe-inline'", "unpkg.com", "cdn.jsdelivr.net", "cdnjs.cloudflare.com", "static.cloudflareinsights.com", "https://openvibe.network"],
        styleSrc: ["'self'", "'unsafe-inline'", "unpkg.com", "cdn.jsdelivr.net", "cdnjs.cloudflare.com", "fonts.googleapis.com"],
        imgSrc: ["'self'", "data:", "blob:", "*.tile.openstreetmap.org", "*.basemaps.cartocdn.com", "server.arcgisonline.com", "image.tmdb.org", "*.wp.com"],
--      connectSrc: ["'self'", "nominatim.openstreetmap.org", "api.weather.gov", "api.open-meteo.com", "*.tile.openstreetmap.org", "*.basemaps.cartocdn.com", "server.arcgisonline.com", "https://openvibe.network"],
++      // events.openvibe.network: release notifications (release-watch's EventSource, openvibe-shared 1.17).
++      connectSrc: ["'self'", "nominatim.openstreetmap.org", "api.weather.gov", "api.open-meteo.com", "*.tile.openstreetmap.org", "*.basemaps.cartocdn.com", "server.arcgisonline.com", "https://openvibe.network", "https://events.openvibe.network"],
        fontSrc: ["'self'", "fonts.gstatic.com", "cdnjs.cloudflare.com", "cdn.jsdelivr.net"],
        frameSrc: ["'none'"],
        scriptSrcAttr: ["'unsafe-inline'"],
ddiff --git a/apps/text/package-lock.json b/apps/text/package-lock.json
iindex dc4fe1d..4cff15c 100644
---- a/apps/text/package-lock.json
++++ b/apps/text/package-lock.json
@@@ -16,7 +16,7 @@
          "express": "^4.18.2",
          "express-rate-limit": "^7.1.5",
          "helmet": "^7.1.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1"
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1"
        }
      },
      "node_modules/accepts": {
@@@ -969,9 +969,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "1.16.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
--      "integrity": "sha512-IB7/BBdIuDrpyLa4OqdoFu2hlkDEQhMvXCs7jqWC9BWlyWxDQbps/FpYqqIDENo5r+/MuNXQf1VAXCHXNwtpsA==",
++      "version": "1.17.1",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
++      "integrity": "sha512-IDwLw3PUxtqXS35QD0pnklsqHD+grHPk9RGpMJgihMXoY46+W5bcPO/2MN8AlCjHaO0WyNp0gYfp02il8Dy+rg==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/apps/text/package.json b/apps/text/package.json
iindex 9156364..2b05e16 100644
---- a/apps/text/package.json
++++ b/apps/text/package.json
@@@ -16,7 +16,7 @@
      "better-sqlite3": "^11.0.0",
      "express-rate-limit": "^7.1.5",
      "dotenv": "^16.3.1",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1"
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1"
    },
    "license": "MIT"
  }
ddiff --git a/apps/text/server/index.js b/apps/text/server/index.js
iindex 41351ad..8899910 100644
---- a/apps/text/server/index.js
++++ b/apps/text/server/index.js
@@@ -65,7 +65,8 @@ app.use(helmet({
              styleSrc: ["'self'", "'unsafe-inline'", "cdnjs.cloudflare.com", "fonts.googleapis.com", "fonts.gstatic.com"],
              fontSrc: ["'self'", "fonts.gstatic.com", "cdnjs.cloudflare.com"],
              imgSrc: ["'self'", "data:", "blob:"],
--            connectSrc: ["'self'", "https://openvibe.network", "https://api.exchangerate-api.com"],
++            // events.openvibe.network: release notifications (release-watch's EventSource, openvibe-shared 1.17).
++            connectSrc: ["'self'", "https://openvibe.network", "https://api.exchangerate-api.com", "https://events.openvibe.network"],
              frameSrc: ["'none'"],
              scriptSrcAttr: ["'unsafe-inline'"],
          },
ddiff --git a/apps/yt/package-lock.json b/apps/yt/package-lock.json
iindex e0ca45f..fae5095 100644
---- a/apps/yt/package-lock.json
++++ b/apps/yt/package-lock.json
@@@ -17,7 +17,7 @@
          "express-rate-limit": "^7.5.0",
          "helmet": "^8.1.0",
          "jsonwebtoken": "^9.0.2",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
          "uuid": "^11.1.0"
        }
      },
@@@ -800,9 +800,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "1.16.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
--      "integrity": "sha512-IB7/BBdIuDrpyLa4OqdoFu2hlkDEQhMvXCs7jqWC9BWlyWxDQbps/FpYqqIDENo5r+/MuNXQf1VAXCHXNwtpsA==",
++      "version": "1.17.1",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
++      "integrity": "sha512-IDwLw3PUxtqXS35QD0pnklsqHD+grHPk9RGpMJgihMXoY46+W5bcPO/2MN8AlCjHaO0WyNp0gYfp02il8Dy+rg==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/apps/yt/package.json b/apps/yt/package.json
iindex b82855b..df9b867 100644
---- a/apps/yt/package.json
++++ b/apps/yt/package.json
@@@ -17,7 +17,7 @@
      "express-rate-limit": "^7.5.0",
      "helmet": "^8.1.0",
      "better-sqlite3": "^11.0.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.16.1",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.17.1",
      "jsonwebtoken": "^9.0.2",
      "uuid": "^11.1.0"
    }
ddiff --git a/apps/yt/server/index.js b/apps/yt/server/index.js
iindex 227f93d..4d2d2ab 100644
---- a/apps/yt/server/index.js
++++ b/apps/yt/server/index.js
@@@ -81,7 +81,8 @@ app.use(helmet({
              styleSrc: ["'self'", "'unsafe-inline'", "https://cdnjs.cloudflare.com", "https://fonts.googleapis.com", "https://fonts.gstatic.com"],
              fontSrc: ["'self'", "https://fonts.gstatic.com", "https://cdnjs.cloudflare.com"],
              imgSrc: ["'self'", "data:", "https://i.ytimg.com", "https://img.youtube.com", "https://*.ggpht.com", "https://openvibe.network", "https://openvibe.media"],
--            connectSrc: ["'self'", "https://openvibe.network", "https://openvibe.tools", "https://*.openvibe.tools", "https://cloudflareinsights.com"],
++            // events.openvibe.network: release notifications (release-watch's EventSource, openvibe-shared 1.17).
++            connectSrc: ["'self'", "https://openvibe.network", "https://openvibe.tools", "https://*.openvibe.tools", "https://cloudflareinsights.com", "https://events.openvibe.network"],
              frameSrc: ["https://openvibe.network"], // the hidden /sso/check sign-in probe
              scriptSrcAttr: ["'unsafe-inline'"],
          },