v1.0.1

Highlights

Security. When an API request failed on an unexpected error, the 500 response carried the error's own text, which could include SQL or internal hosts. Such errors now answer with a reference (meta.reference), and the error is logged on the server under that reference with the request id (#4, GHSA-9xjq-4j36-pcgm).

Fixes

• A notification list cursor beyond 2³¹ answered 500; it is now refused with 422 (#3).
• The adapter SDK trims trailing slashes from URLs in one pass instead of a backtracking regular expression (#3).

Documentation

• A shorter README with screenshots, plus guides for self-hosting, configuration, the reverse proxy, Postgres, the API and the architecture (#2).
• The app's links to the API reference, the reverse-proxy guide and the Postgres tuning guide now open those pages.
• A contributing guide, code of conduct, security policy and support page (#2).

Upgrading. This release has no new migrations.

• Docker: docker compose pull && docker compose up -d.
• Binary: replace it, then run reputecast migrate up.

The image is ghcr.io/hostrepute/reputecast:v1.0.1.

Changelog

• 425cedb: chore(github): issue forms, a pull request template and Dependabot (@hostrepute-com)
• 484f52f: chore: editorconfig, and Linguist attributes for the design boards and generated files (@hostrepute-com)
• 0696124: docs(readme): a shorter README with screenshots of the app (@hostrepute-com)
• e048bfb: docs: contributing guide, code of conduct, security policy and support (@hostrepute-com)
• 0400ca2: docs: guides for self-hosting, configuration, the reverse proxy, Postgres, the API and the architecture (@hostrepute-com)
• 6d1e83c: fix(api): keep unexpected errors' text out of 500 responses and log it under a reference (@hostrepute-com)
• 778584f: fix(notify): refuse a notification cursor beyond int32 instead of failing the query (@hostrepute-com)
• 14c364d: fix(sdk): trim trailing slashes in one pass instead of a backtracking regex (@hostrepute-com)