A bot that posts the latest commit from repositories tagged with the #nostr topic once an hour.
[ orangecheck/oc-packages ] me-client 0.59.0
Releases the answer to the sign-in popup's opener check, and the account and scope comments that say which sites get no name.
https://github.com/orangecheck/oc-packages/commit/d9128607dd4c55377e40ebb28e51a9db359f3b98
[ getAlby/hub ] feat(alby): add PKCE support to Alby account login (#2704)
Serve the Alby authorization URL from a new /api/alby/auth-url endpoint instead of /api/info. Each browser gets its own OAuth state and PKCE verifier in HttpOnly cookies; the callback checks the state and sends the verifier with the token exchange. The desktop app keeps the verifier in memory.
Co-authored-by: Claude Opus 5.5 [email protected]
https://github.com/getAlby/hub/commit/aa07537f45f9dddebf948687144bbc2f239a1f9c
[ CodyTseng/jumble ] feat(profile): show full followed-by list
https://github.com/CodyTseng/jumble/commit/bfe87d4c3e1d3175b999bd8ba630660daffb0dae
[ MiguelMedeiros/ghostly ] feat(android): chats stay connected in the background (foreground service, can be switched off) (#6124)
[ MikhailSagalaev/openradar ] feat(v0.65.0): add ISCO-08 occupation taxonomy (#61 F-04), /v2/feed & MCP occupation_code filters, and insights occupation breakdown
https://github.com/MikhailSagalaev/openradar/commit/9d572cf98617613ca901db42f01cd8800437704d
[ arkin0x/ONOSENDAI ] WALK: review fixes for #654 (double jump never lowers the arc) (#655)
[ Paradise-Chat/Paradise ] bump version
https://github.com/Paradise-Chat/Paradise/commit/336e43f14b8d024a52a85677314a95b9a08c3951
[ privkeyio/wisp ] Release v0.9.3 (#214)
https://github.com/privkeyio/wisp/commit/d85998eb26104a2c92d6376bef0effe7b9f38224
[ flox1an/almond ] chore(release): prepare v0.5.4
https://github.com/flox1an/almond/commit/7ff8d2a352967e56d7b72980abb203fba03afb34
[ papiche/Astroport.ONE ] ./install.sh --astroportd
https://github.com/papiche/Astroport.ONE/commit/6f8b767b9ae89c9164dcf8cdb5b726bc3ac8ee06
[ Brostr/bro ] v778b: CI/CD - suite de corrida vira GATE nos 3 workflows de release (full-release, ios-testers, android-public-release) + workflow rapido race-tests em todo push - nenhum release sai sem os 24 testes verdes
https://github.com/Brostr/bro/commit/2ed53e3ab928002f96923d9f8f9c678d0f92d816
[ Cordn-msg/cordn-web ] Merge pull request #57 from Cordn-msg/feat/onboarding
Feat/onboarding
https://github.com/Cordn-msg/cordn-web/commit/1513fb3d9771d034c8df7b7bb3fb46c30035284a
[ thomaschaplin/weneedbananas ] Prepare the repo to go public, link to it from the site, and bump dependencies (#20)
Add an MIT LICENSE, SECURITY.md (private vulnerability reporting), CONTRIBUTING.md, and license/repository/homepage/bugs fields in package.json. README gains CI and license badges and contributing and license sections. Remove the Actioneer demo workflows, which test a private runner setup and don't belong in a public repo.
https://github.com/thomaschaplin/weneedbananas/commit/11a29b4e48a7934d827d087ba5b6a312eae4dd68
[ geyserfund/geyser-app ] chore(release): prepare v1.3.2
Co-Authored-By: Claude Opus 5.5 [email protected]
https://github.com/geyserfund/geyser-app/commit/d584ce9072456b9dba8984a1b3e7b378c709160c
[ HolgerHatGarKeineNode/twenty-one-esports ] 💄 On a phone, the Hyperbitcoinization roster moves down when a long hint or the "Muted" note wraps the top bar, instead of being covered by it
The roster's top follows the bar's bottom (--hud-bottom from a ResizeObserver); measured at 390: bar 225 px, roster 229 with a long instruction, 179/182 without.
Co-Authored-By: Claude Opus 5.5 [email protected]
[ athlon-misa/openfederation-pds ] Security and reliability fixes from the codebase review (#289)
Dockerfile runs as the node user; compose passes the production env; the PLC server refuses to start without a database unless PLC_ALLOW_IN_MEMORY is set. express 5.3, body-parser 2.4, nodemailer 10.4; web UI on Next.js 16.4.6.
Parallel writes could leave the tree pointing at deleted blocks. Writes are queued per repo, a commit lands only if its base root is still current (RepoConcurrentWriteError), and records_index is updated in the commit's transaction.
https://github.com/athlon-misa/openfederation-pds/commit/acd4299d57dc32014a00f6c033d439990bd412ae
[ arkin0x/ONOSENDAI ] WALK: facing diagonally on the ground walks diagonally (corner rule) (#652)
Play test 2026-11-10: facing diagonally across the grid, presses snapped to axis-adjacent gibsons, zigzagged, and walked him off narrow platforms.
The 8-direction snap was right (22.5 to 67.5 degrees is the diagonal). The corner rule in planWalkMove was not: a diagonal needed both side cells open and, under GRAVITY, both standing; anything else fell back to
https://github.com/arkin0x/ONOSENDAI/commit/6f6ffde418461c1ce5965e477c643d3cafd397d2
[ MiguelMedeiros/ghostly ] test(e2e): restore the emulator IPv4 route before Android calls, and trace a call that never connects (#6118)
[ lawalletio/lawallet-nwc ] fix(web): Sentry cleanup — dependency source maps, pino logs, payment-pending noise (#397)
[ papiche/astroportd ] 0.6.0-beta : installation soignée (glibc, niveau Y, kubo, réseau, plugins)
[ elregann/Chatme ] Chatme v1.33.1: reply highlight now ends exactly at the bottom of the bubble
https://github.com/elregann/Chatme/commit/41558ec62357bcf5627e0e2f05afa58ae07af4cd
[ SnowCait/nostter ] Merge pull request #2807 from SnowCait/migrate/content-linkify-it
Migrate content URL extraction to linkify-it
https://github.com/SnowCait/nostter/commit/78e22b7a7e79825290ee779a958a368eb90833f7
[ flox1an/bouquet ] chore(release): v0.1.11
https://github.com/flox1an/bouquet/commit/042300db3e8a75ff324e0a1f8a44b6e208fd8306
[ Trustroots/trustroots ] Retry Android coverage on a fresh emulator after a boot ANR (#3584)
https://github.com/Trustroots/trustroots/commit/f0aa2e50dce9c69ef5bb05da32b60ed544a9d1d3
[ greenart7c3/Citrine ] Point the Zapstore release notes at 3.2.2
https://github.com/greenart7c3/Citrine/commit/f04feb7082511ab963dd9ba926fa00fff7ce09d1
[ besoeasy/gupt ] feat(cache): add optional local Rabta backup node command
https://github.com/besoeasy/gupt/commit/5c10da8cbd75e3e720ab1901a1bad00ecdf4af7c
[ flox1an/nostube ] fix: honour trust filter when swiping shorts in v0.2.72
https://github.com/flox1an/nostube/commit/78067d756ba7a0a91419136b742f68376d4dfda4
[ arkin0x/ONOSENDAI ] Workshop: BOUNCE control beside CONSTRAIN, and a chip for bouncy shards (#653)
The owner asked (2026-11-10): "can i make bounce surfaces in the workshop now then?" The SHARD panel gets BOUNCE under CONSTRAIN: OFF, HEIGHT (a stepper 1 to 24 plus presets 3, 6, 12, 18, 24) and REFLECT, and with a fixed height a SPRINGBOARD switch ("launch on walk-on"). One explain line: "Walkers with gravity on bounce off its top."
https://github.com/arkin0x/ONOSENDAI/commit/8ea027754dd89bb20ae1fa387e580cff28a8cea8
[ flox1an/almond ] chore(release): prepare v0.5.3 with FIPS 0.5.3
https://github.com/flox1an/almond/commit/6927937860051c6f16f12590a0127d14410c7882
[ rnostr/rnostr ] Merge pull request #34 from berserker-systems/s/fix_tags
Fix addressable event replacement keys
https://github.com/rnostr/rnostr/commit/3a023c45cdc8d256537600eccfd052465e8a680c
[ MiguelMedeiros/ghostly ] test(cli): the mDNS note test's answering side gets the offer without its candidates, so no check races the answer (#6123)
[ besoeasy/gupt ] feat(cache): add optional local Rabta backup node command
https://github.com/besoeasy/gupt/commit/5c10da8cbd75e3e720ab1901a1bad00ecdf4af7c
[ ZeusLN/zeus ] Merge pull request #5377 from kaloudis/fix/nwc-stop-service
android: make NWC Stop Service stop answering requests
https://github.com/ZeusLN/zeus/commit/1321bd7dd50eabb17d62b2c5992f1ee5ffdb7c3d
[ SnowCait/nostter ] Merge pull request #2806 from SnowCait/test/url-boundary-regressions
Add URL boundary regression tests
https://github.com/SnowCait/nostter/commit/b59a26d56f2e3143c33cb8d3ff54337b8e34837d
[ TwentyOneLife/sovereign-swap-relay-startos ] release: 0.1.2:4 - relay flood hardening (daemon v0.6.18) (#11)
Bumps the pinned daemon to v0.6.18 (sovereign-swap #150, #151, #153) and the package revision to 0.1.2:4. No config or data change, so it is a revision bump with a no-op migration, like prior revisions.
The daemon upgrade brings the relay's abuse-deterrence controls (design 0007, issue #149): per-connection subscription and request rate limits with an amplification cap and a subscription cap, a small starting burst, an idle-socket deadline, a bounded connection-closing subscriber outbox, a byte-bounded store
[ bst27/nostr-explorer ] Update dependency nostr-tools to v2.26.0
https://github.com/bst27/nostr-explorer/commit/4fde78821996cac7082828ac9debf17a505d200b
[ adamdecaf/nostr-book ] chore: automated publishing
https://github.com/adamdecaf/nostr-book/commit/1405c37878a75f28b01a25ff59b68b519f0db885
[ decented/axenstax ] Test missions: a full guide for build 0.2.33 (four solo missions with what to type, exact numbers, what success looks like and what to check when it doesn't work, plus how the Living World works and a feedback template), and instructions for a chat assistant co-hosting a playtest video
https://github.com/decented/axenstax/commit/590b539023521d2b657877d18e4a71e102882dca
[ HolgerHatGarKeineNode/twenty-one-esports ] 💄 German organizers read "Termin abstimmen lassen" on one line on a phone, and the German TV panel shows "Abstimmung" uncut while the start is put to a vote
Co-Authored-By: Claude Opus 5.5 [email protected]
[ MiguelMedeiros/ghostly ] fix(web): with Hide my IP from contacts on, a contact's app does not open on the web, and says why (#6119)
[ Origami74/myco ] feat: napplet gamepad input (NAP-GAMEPAD) (#173)
Implement NAP-GAMEPAD (napplet/naps draft, pinned in the runtime doc) as
window.napplet.gamepad: cached controller snapshots behind the
reviewed per-app "gamepad" permission.
The trust split keeps per-frame values off JNI. Rust owns the capability: it authorizes subscribe/unsubscribe per session, ignores
https://github.com/Origami74/myco/commit/d49088b9b9c41d283eb0bc9ac5fc2c0c6b77e5fd
[ MikhailSagalaev/openradar ] feat(monitoring): service health monitor and alerting for external apis
https://github.com/MikhailSagalaev/openradar/commit/dc84b04208612cb6439e9f3fb5aeb29b70e34595
[ rnostr/rnostr ] Merge pull request #33 from berserker-systems/s/remove_msg
remove obsolete commented-out message code
https://github.com/rnostr/rnostr/commit/348f101876e0d7fddb265b59f538f5b10567185e
[ getAlby/hub ] chore: bump macOS runner to macos-15 (#2703)
GitHub retired the macos-14 runner image, causing workflow failures: "The configuration 'macos-14-arm64-us-default' is not supported".
Co-authored-by: Claude Opus 5.5 [email protected]
https://github.com/getAlby/hub/commit/e6fc45bcd787dbbd3285926b0bf27b02960094bb
[ greenart7c3/Citrine ] Bump version to 3.2.2 and update changelog
https://github.com/greenart7c3/Citrine/commit/5acc28158cfa3f0ae50f7c07a6289807e0b50be5
[ orangecheck/oc-packages ] auth-client: a sign-in cut off by a sign-out elsewhere in this browser says so
ochk.io answers no_roster when a sign-out in another tab replaces this browser's account list while an added sign-in is still finishing. It keeps no session. OcSignIn had no words for that reason, so it showed "That didn't work. Try again." on a wallet or email sign-in, and the general banner after a provider sign-in. It now says nothing was kept and to sign in again. On the email path it says to send a new code, because the old one is spent.
https://github.com/orangecheck/oc-packages/commit/2a564f2e4174ff66c525f5adc67bf24f2bd20dc2
[ kernlize/web ] Merge pull request #26 from kernlize/feat/common-actions
feat: social actions for applets (common), follow changes shown first
https://github.com/kernlize/web/commit/05bb70a3cfb1da2f5bd84bdd280f3fea9c806020
[ LightningPiggy/lightning-piggy-mobile ] chore(release): v1.7.6 (#1846)
Co-authored-by: Claude Opus 5.5 [email protected]
[ Trustroots/trustroots ] Add a location control to the Android host map (#3577)
Add device location to the Android host map
Match the Android location control to the web map https://github.com/Trustroots/trustroots/commit/b657d6dc46def6f628d0b23defc85a14c79ebe2d
[ Trustroots/trustroots ] Add a location control to the Android host map (#3577)
Add device location to the Android host map
Match the Android location control to the web map https://github.com/Trustroots/trustroots/commit/b657d6dc46def6f628d0b23defc85a14c79ebe2d
[ 21gifts/api ] f18d82fc - Wake the A38 guard when CI completes (#563)
Wake the A38 guard when the required CI workflows complete
List workflow_run among the A38 guard triggers in CONTRIBUTING https://github.com/21gifts/api/commit/b16fa9a30184435e5571c8018029299e62c7a4a9
[ besoeasy/gupt ] refactor(calls): name live signal subscription after calls
Rename subscribeEphemeralSignals, signalLive, and startSignalSubscription to their call-specific equivalents now that typing signals are gone.
https://github.com/besoeasy/gupt/commit/9eb7d29d4178ff03bae4e80e251af00dc512e639
[ greenart7c3/Citrine ] Merge #7825177e: Show download progress and cut the Room insert overhead
"Download your events" looked stuck: the notification was written once per relay and never updated, so it sat on "loading events from " for the whole run (11 minutes for this account's archive).
until only
https://github.com/greenart7c3/Citrine/commit/8e87dd82b463e2e73786bdd96fe7327fb4bc21b9[ napplet/web ] fix(conformance-cli): make @kehto/paja an optional peer (#325)
conformance-cli pinned core/nap exactly but hard-depended on Paja 0.21.x, whose peers only accept core/nap <0.35, so every install pulled a second core/nap generation. Paja only backs local screenshot previews, so load it with a dynamic import as an optional peer and explain how to install a compatible release when it's missing.
https://github.com/napplet/web/commit/d98eb5e1e788675a02c8ba5af4a2a60a0c1e163b
[ Trustroots/nostroots ] Store iOS credentials and trusted-site history in Keychain (#333)
Migrate legacy simulator keys and matching recovery phrases to Keychain. Surface Keychain failures instead of writing secrets to preferences.
Migrate existing trusted-site history from preferences while preserving the settings list.
https://github.com/Trustroots/nostroots/commit/f3346acc4b23f6763fc31fcff06641147e420b02
[ kernlize/web ] Merge pull request #24 from kernlize/ci/release-on-merge
Release to npm and JSR on merging the Version Packages PR
https://github.com/kernlize/web/commit/b33abf0a91dfbc8ad2af57afe0c6d1dfa843b780
[ knigopis/knigopis-p2p ] Настройки: ключ и серверы — под «Дополнительно»
На виду остаётся то, что нужно каждому: ник, резервная копия, вход на другом устройстве, старые записи, выход. Показ ключа (nsec/npub) и список relay свёрнуты в
Co-Authored-By: Claude Opus 5.5 [email protected] https://github.com/knigopis/knigopis-p2p/commit/f2b6e0180507de95bbe8f3ae291856ae59c1a1f8
[ CodyTseng/psstpsst ] fix: preserve application cancellation and remove web warnings
https://github.com/CodyTseng/psstpsst/commit/b81f9914a8be7751aef0488baaab4eac102e916b
[ MikhailSagalaev/openradar ] feat(v0.64.0): fix live workplace/HR/Vue/MCP salary bugs, enrich get_market_analytics, add DATA_CONTRACT, TAKEDOWN, Smithery & Glama manifests
https://github.com/MikhailSagalaev/openradar/commit/348aaf67f20ecbba3f553b778980fab99b068698
[ mmalmi/nostr-vpn ] Scope the Linux WireGuard upstream policy rule to the mesh interface (#160)
Match the WireGuard upstream rule only on mesh ingress so overlapping local networks keep their ordinary routing. Record the interface in cleanup and rollback state while preserving legacy journal cleanup, and cover the overlapping-LAN case in the WireGuard exit regression test.
https://github.com/mmalmi/nostr-vpn/commit/827bcee7ce109a5e8aba37b0605b136da8532f8a
[ HolgerHatGarKeineNode/twenty-one-esports ] 💄 The Blockli lobby's tutorial tile reads "Learn to play" in English, as Blockspace's; German stays "Spiel lernen"
Follow-up to PR #24. The team match test now reads the clan member's link off the team tile and the slim line themselves, so a member sent to the clan list instead of their clan page turns it red (the shell links the member's clan elsewhere, which kept it green before).
Co-Authored-By: Claude Opus 5.5 [email protected]
[ Trustroots/trustroots ] Show hidden profiles in admin member reports (#3576)
https://github.com/Trustroots/trustroots/commit/7667b0db20d741f3da8a686c352de4ebd5ea3f54
[ CodyTseng/psstpsst ] fix: stabilize application titlebars and permission spacing
https://github.com/CodyTseng/psstpsst/commit/af6d6d0ab39ae5a0ceeff2e18acec01740261c42
[ Trustroots/nostroots ] Use Web Crypto for all Nostrail IDs (#332)
Generate location-sharing session IDs and relay subscription IDs with one 128-bit Web Crypto generator. Remove the remaining Math.random calls in Nostrail.
Co-authored-by: K [email protected]
https://github.com/Trustroots/nostroots/commit/e300e98d786d4d8fc7bb91cf579a289b2e0f054e
[ orangecheck/oc-packages ] chore(deps): update dependency @orangecheck/sdk to v1.25.1
https://github.com/orangecheck/oc-packages/commit/93685bbdb4f5114ac9c63facb21bbfb8315c3311
[ getAlby/hub ] fix(swaps): return an error when looking up an unknown swap (#2686)
GetSwap used Limit(1).Find, which doesn't fail when no row matches, so GET /api/swaps/:swapId answered 200 with an empty swap for an id that doesn't exist.
https://github.com/getAlby/hub/commit/a0e0e50a5c0c6f6b1d2591bc75bf72dbc445ad82
[ kernlize/web ] Merge pull request #22 from kernlize/ci/link-checker
Link gate for the site, and docs pages that answer at their clean URLs
https://github.com/kernlize/web/commit/08d2268931036785f5aee82981e6a6f6f287850b
11/10/2026, 1 engagement
[ nostr-wot/nostr-wot ] Reconcile Amethyst ecosystem delivery (#149)
Confirm the durable Nostr receipt and close the November 3 ecosystem outcome on the expected alternate Tuesday.
https://github.com/nostr-wot/nostr-wot/commit/b3857cd7238f86199b34680139aab2621c1e0a7a
[ alaibe/statim ] Repair a homeserver log that lost its blocks before tuwunel starts
tuwunel's RocksDB sometimes loses a run of records from a write-ahead log while it runs (tuwunel #653). Every later record then sits off the 32 KB blocks RocksDB reads in. It happened on two nights in a row; each time the next start spun until the 30 s timeout, and on a smaller test database RocksDB instead opened and dropped the records.
Before each start, after stopping a server a crashed run left behind, the app takes RocksDB's own lock on the database and walks each log's headers.
https://github.com/alaibe/statim/commit/302f14c6ae28d04b56337212e9b22b146144162d
[ xdzczk/nostrmash-web ] Keep overview media inside the phone column and clamp zap notes to two lines.
https://github.com/xdzczk/nostrmash-web/commit/d191cc45a7a5ef1457331efa7697d16ab2920b27
[ besoeasy/gupt ] Run a queued replication tick immediately after the current cycle
https://github.com/besoeasy/gupt/commit/a3d2ab6be1079746bbad4ddba739fdf459168bee
[ orangecheck/oc-packages ] auth-client 2.48.0: moving a linked email or address here can succeed
ochk.io spends a link's proof on any try it answers, the "linked to another account" answer included. "transfer link here" sent the spent code or signature again, so every move was refused. A move now sends a new code, or asks for one more signature over a new message, and sends that with confirm_transfer.
A refused wallet signature spent its message the same way, so the next signature was refused too. The form now fetches a new message after a
https://github.com/orangecheck/oc-packages/commit/3303c876dbbfb391d47093cbd9eb6d2a60368788
[ elregann/Chatme ] Chatme v1.32.1: smoother speaker toggle by using a single native audio route
https://github.com/elregann/Chatme/commit/6159139641f08114818ddc77054469f56c29f538
[ avinashid/peerwire ] Merge security/NB110d-I3-accepted (5719bf8): threat model records NB110d-I3 as accepted by the repo owner on 2026-11-10, as shipped (the LED demo stays on the site with no note)
https://github.com/avinashid/peerwire/commit/b3f73218c72ac2fa58647ccd53f7ca5102c4db31
[ nexus-united-species/oneapp ] Merge pull request #10 from nexus-united-species/lead/multi-agent
Zellen löschen durch Gründer oder Superadmin netzweit
https://github.com/nexus-united-species/oneapp/commit/2a0f9bfec96066404908ccd105a100aedc865523
[ xdzczk/nostrmash-web ] Give cached video previews a content length so Cloudflare can answer Safari's range probe.
https://github.com/xdzczk/nostrmash-web/commit/736b7c727226c0392cdee794d05e5e2cddb05849
[ MiguelMedeiros/ghostly ] fix(web): Hide my IP: a contact's app page with a quoted charset or ISO-2022-JP runs no scripts (#6108)
[ avinashid/peerwire ] Merge security/NB-119-clock-tm (5315592): threat model for NB-119 part 2 (NB119-2, NB119-I3 and NB119-I4 fixed), NB110d-I1 and NB110d-I2 fixed by 226529e, NB110d-I3 open (the LED demo's Bluetooth grant on the site's shared origin)
https://github.com/avinashid/peerwire/commit/2c0e4392776246cae4639ff988158879e1fef306
[ 21gifts/api ] 7764da32 - Fond rank and payout queue paid from the member wallet (#553)
With PAYOUT_SIGNER=fond the existing ping path no longer posts the decided payout to the spend service. It writes the same instruction into the new fond_payout table (one row per day, kind and address; welcome once per address). The member with role fond and username FOND_USERNAME lists today's open payouts, gets each BOLT11 invoice from the API (USD converted with the API spot) and posts the preimage as proof, which
https://github.com/21gifts/api/commit/e8f2e43166fa1e092b8dcbe335ff7a91e22e26ac
[ besoeasy/gupt ] Finish Dexie-first migration for DMs, groups and profiles
https://github.com/besoeasy/gupt/commit/e1f7d851b47259b4b530d5f9ee75a0f517b7345a
[ nexus-united-species/oneapp ] Merge pull request #9 from nexus-united-species/lead/multi-agent
Mitgliederliste vom Gründer (TD-33) und Korrekturen aus dem Gerätetest
https://github.com/nexus-united-species/oneapp/commit/6a080bad2238b5c256292ddf9d406a0ce2c849de
[ orangecheck/oc-attest-protocol ] §7.1 step 3: the address is on the network the message selects; vector tv34
A message selects testnet or signet only by that exact network value, and mainnet otherwise, so a value that whitespace pads or capitalises selects mainnet. An addr that decodes as another network's address is bad_request, before network_testmode. A builder writes no other network value, and no address of another network under one.
tv34 holds 14 attestations signed by burn key #1 for its mainnet, testnet or regtest address, with the verifier's test mode and the
https://github.com/orangecheck/oc-attest-protocol/commit/51d05314fe5811d8b042e211833ac20ee09cd165
[ wolfqing/openchat ] Merge pull request #31 from wolfqing/docs/readme-v0.7.2
README: say what has been tried, fix the install steps, add what to expect
https://github.com/wolfqing/openchat/commit/2b75bb632ec1cf6aa23aabaf7af29342c260d5d0
[ xdzczk/smartflowsocial-cache-worker ] Restore the formatted request-type catalog.
[ orangecheck/oc-packages ] conformance: vendor tv33, the value-as-written vector
oc-attest-protocol adds tv33: attestations validly signed by burn key #1 with one value that whitespace pads, and a control. The TS runner checks the code verify() answers for each at the vector's clock and expected aud, and both builders write or refuse each case that names one.
https://github.com/orangecheck/oc-packages/commit/5ba7763ac3acca2f205de9a323539bbb56d91ad5
[ chebizarro/nostrc ] Merge remote-tracking branch 'origin/master'
https://github.com/chebizarro/nostrc/commit/e3dc1ebc78738e6eb3d2c0d9cd031c18fb5ca30a
[ qntx/wallet ] fix: bind quotes and signed content, harden vault re-verification (audit A-2026-11, part 4) (#218)
fix: bind quotes and signed content, harden vault re-verification (audit A-2026-11, part 4)
https://github.com/qntx/wallet/commit/26d4bb578e8a3491d8965ae42103b325334ed677
[ MiguelMedeiros/ghostly ] perf(groups): a received edit or deletion saves the group's small row, not its whole record (#5505)
[ arkin0x/ONOSENDAI ] WALK controls: hold walks from the press on; diagonals on the pad and in the air (stacked on #649) (#651)
An object-level SNO field bounce (provisional; spec shape pending the
anim and bounce design note): a whole number 1 to 24 launches a walker
landing on one of the object's faces to that many gibsons; "reflect"
launches back to the height its fall came from, at most 24. Anything
else is no bounce. sno-core carries it in extra, as it does constrain.
https://github.com/arkin0x/ONOSENDAI/commit/b9c75409eb50b8513884b8291edb0a4a68e741ee
[ wolfqing/openchat ] Merge pull request #30 from wolfqing/android/v0.7.2
Android v0.7.2 preview
https://github.com/wolfqing/openchat/commit/b1181e7f8f0bb4ec6c56a83ab0bf6fb62cf2b550
[ orangecheck/oc-attest-protocol ] §2.2: a value is read as written; vector tv33
The signer and every verifier need to read one value from each signed line. A reader now takes every character after the first ": " on a line and does not trim it, so a value that whitespace pads is not the value inside it. An identifier has no whitespace at either end, and §9 names bad_request for an address other than the request's (§7.1 step 1.e).
The ABNF now agrees with the prose and the reference SDK: no blank line after the last one, extension keys such as relay_hints, protocols with
https://github.com/orangecheck/oc-attest-protocol/commit/43370a3274ecef280882a2937b7e1ac8b845fd3e
[ orangecheck/oc-packages ] auth-client 2.47.0: a refused sign-in no longer moves the button that was pressed
The refusal line sat between the field and the submit button, so the button dropped 19 to 45 px the moment it was said, under the pointer that had just pressed it. Saying it under the button keeps the button where it was, however many lines the words take. The provider-failure box is an alert now, so a screen reader says it, as it already said every other refusal on the form.
https://github.com/orangecheck/oc-packages/commit/791e16dcdb871c49a1422b0a41fd56a911684c49
[ CodyTseng/psstpsst ] test: fix service mocks and identity query assertion
https://github.com/CodyTseng/psstpsst/commit/b4d13ec72ea109bcc56c725a98a3ab653d6bd2d2
[ CodyTseng/jumble ] fix: unify reaction filtering for muted and untrusted profiles
Closes #890
https://github.com/CodyTseng/jumble/commit/b713e5695c244d66e890127f84ef58f3a218b3e4
[ MiguelMedeiros/ghostly ] fix(cli): edit, react, pin, file send and status cards on a chat nobody joined answer at once instead of timing out (#5716)
[ qntx/wallet ] fix: CI pinning, gateway limits, native safety and docs (audit A-2026-11, part 3) (#217)
fix: CI pinning, gateway limits, native safety and docs (audit A-2026-11, part 3)
https://github.com/qntx/wallet/commit/6884bb839147a6fb9d1d268a6948aaf72306d103
[ wolfqing/openchat ] Merge pull request #26 from wolfqing/android/v0.7.1
Android v0.7.1: globe labels that stay readable on the world view
https://github.com/wolfqing/openchat/commit/15a1a6b6c00cede8ec7c74befdb9abcf61faf29a
[ LightningPiggy/lightning-piggy-mobile ] chore(release): v1.7.5 (#1829)
Co-authored-by: Claude Fable 5.2 [email protected]
[ MiguelMedeiros/ghostly ] fix(calls): a Linux call's ICE restart tells the peer this round's candidates alone, not the dead ones of before (#6096)
[ veydanproject/Veydan-Chat ] Veydan Chat 5.2.1-rc.5
https://github.com/veydanproject/Veydan-Chat/commit/178ffa5ef76e3e036fa4fdfeb361b8ba68247a00
[ gandhiyaash/sattle ] Merge pull request #116 from omswami2004/om/live-check-user-agent
Live check: name the client, so Cloudflare lets the WhatsApp message through
https://github.com/gandhiyaash/sattle/commit/a9660699cde38e84da361fede0529dea25380abe