v0.0.4

Contributors: @claude @luckywtrike-rgb @palenghahah @Yogs4R

🚀 What's New

• feat(bot): log why found mentions are skipped

🐛 Bug Fixes

• fix(bot): stop mention polling from freezing, double-replying, and posting internal errors
• fix(bot): read mention notifications from the raw response and log why it is empty
• fix(bot): don't treat tweets that start with @lacakbuzzer as thread replies
• fix(bot): poll newer notifications via cursor-top and log newest mention age
• fix(bot): only respond when @lacakbuzzer is actually typed

📚 Documentation

• docs(changelog): update changelog.json with release v0.0.3 highlights
• docs(changelog): rewrite all release highlights in user-friendly language for non-developers

❓ Other Changes

• Merge pull request #35 from luckywtrike-rgb/fix/x-bot-mention-polling
• Merge pull request #36 from luckywtrike-rgb/fix/x-bot-notification-parsing
• Merge pull request #37 from luckywtrike-rgb/fix/x-bot-skip-reasons
• Merge pull request #38 from luckywtrike-rgb/fix/x-bot-reply-detection
• Merge pull request #39 from luckywtrike-rgb/fix/x-bot-notification-freshness
• Merge pull request #40 from luckywtrike-rgb/fix/x-bot-visible-mention-only

---

Note: This changelog was automatically generated from commit messages with Github Action.

v0.0.3

Contributor: @Yogs4R

🚀 What's New

• feat: add secure dynamic github contributors credits section to home page
• feat(ui): improve TweetDetailsModal with search, filters, sort, metric descriptions, and z-index fix
• feat(bot): migrate to twikit with JSON credentials and add anti-ban measures
• feat: add promo keywords to bot reply, widen first-run since_time to 10min, update README bot usage
• feat(geo): add llms-full.txt for comprehensive LLM search engine indexing
• feat(geo): link llms-full.txt in llms.txt and add AI crawler rules to robots.txt
• feat(seo): support dynamic meta descriptions across all pages via useSEO hook
• feat(router): add custom 404 not found page with noindex seo and recovery navigation
• feat(seo-geo): add llms-full.txt, enrich AI crawler directives, and optimize per-page meta tags
• feat: add docker-compose and frontend dockerfile for local self-hosting
• feat(backend): support user replies scraping and interaction behavior evaluation
• feat(frontend): implement modern sleek redesign with above-the-fold omnibar and leakcheck styling
• feat(frontend): add fixed full-page maintenance overlay for temporary maintenance
• feat(backend): upgrade twscrape, add scraper fast-fail, and implement dual-channel bot mention detection
• feat(frontend): revamp About page, add Radar leaderboard, changelog dropdown, and animated search placeholder
• feat(radar): implement distinct filtering and limit 200 with pagination on radar leaderboard
• feat(ui): redesign changelog popup into centered modal with blurred backdrop and solid dark contrast

🐛 Bug Fixes

• fix(deps): upgrade pydantic to 2.13.4 to resolve conflict with fastapi 0.138.2
• fix: optimize input prompt for cheapest output
• fix(deps): upgrade twikit to 2.3.3 for better stability and fix CI build
• fix(bot): point twscrape API to correct db path and add twikit init logs
• fix(ui): reset modal filter state on open and fix duplicate keys causing reconciliation bugs
• fix: update x_bot to use latest search with since_id and truncate replies to 280 chars
• fix(backend): support HEAD method on root and stats endpoints for health checks
• fix(deps): bump sentence-transformers and transformers to patch Trivy CVEs
• fix(security): patch msgpack and setuptools vulnerabilities for Trivy scan
• fix(seo): remove 404 favicon, enrich OpenGraph/Twitter tags, and add noscript fallback
• fix(security): apply os security upgrades in dockerfile to resolve trivy cves
• fix(security): bump urllib3 to 2.8.0 to resolve Trivy CVEs
• fix(security): suppress residual urllib3 CVEs and clean ensurepip in Dockerfile
• fix(frontend): configure @tailwindcss/postcss and index.css for Tailwind v4 compatibility
• fix(frontend): restore tailwindcss v3 to preserve UI layout and override postcss-selector-parser to 7.1.6 for security
• fix(frontend): restore tailwindcss v3 to fix UI layout regression on production
• fix: change one of contributor github username to the new one
• fix(ci): whitelist example templates in gitleaks and sanitize dummy private key
• fix: resolve math rendering in README and untrack .agent directory
• fix(frontend): add dark theme hover to maintenance button and resolve minimatch vulnerability
• fix(bot): replace twikit with twifork and fix twscrape search query to restore mention detection and replies
• fix(ui): use React Portal for changelog modal to prevent CSS transform trap from header
• fix(ui): remove svg icon on changelog pop up
• fix(radar): invalidate stale session cache to ensure 200 distinct accounts load immediately

🛠 Maintenance & Refactor

• chore(headers): configure utf-8 content-type and cache-control for llms text files
• chore: remove legacy bmad agent wrappers and update gitignore
• chore: add deepsec configuration and shadcn agent skills

📚 Documentation

• docs: add project og-image to readme under shields
• docs: remove deprecated X API variables and update bot status to active
• docs: change format response X bot
• docs: add code of conduct, contributing, security, and contributors guidelines
• docs: update contact email in CODE_OF_CONDUCT.md
• docs: expand PLANNING.md with CLI, MCP, SDK, extension, and self-hosted roadmap
• docs: add credential template examples and setup guide for twscrape and firebase
• docs: add scoring methodology and mathematical formulas section to README
• docs: modernize README header, add overview section, and prepare preview layout
• docs: document X bot technical limitations and experimental status in planning and readme

❓ Other Changes

• security: remove Dependabot and upgrade fastapi to 0.138.2 to fix Starlette CVEs
• style: increase modal z-index to z-[100] to overlay sticky navbar
• build(deps-dev): bump js-yaml from 4.2.0 to 4.3.0 in /frontend
• Merge pull request #21 from Yogs4R/dependabot/npm_and_yarn/frontend/js-yaml-4.3.0
• build(deps-dev): bump postcss from 8.5.15 to 8.5.24 in /frontend
• build(deps): bump react-router and react-router-dom in /frontend
• build(deps-dev): bump postcss-selector-parser in /frontend
• build(deps-dev): bump browserslist from 4.28.2 to 4.28.9 in /frontend
• Merge pull request #22 from Yogs4R/dependabot/npm_and_yarn/frontend/postcss-8.5.24
• build(deps-dev): bump js-yaml from 4.3.0 to 4.3.2 in /frontend
• build(deps-dev): bump brace-expansion from 1.1.14 to 1.1.18 in /frontend
• Merge pull request #23 from Yogs4R/dependabot/npm_and_yarn/frontend/multi-2181bdc769
• Merge pull request #25 from Yogs4R/dependabot/npm_and_yarn/frontend/postcss-selector-parser-6.1.4
• Merge pull request #26 from Yogs4R/dependabot/npm_and_yarn/frontend/browserslist-4.28.9
• Merge pull request #28 from Yogs4R/dependabot/npm_and_yarn/frontend/js-yaml-4.3.2
• Merge pull request #29 from Yogs4R/dependabot/npm_and_yarn/frontend/brace-expansion-1.1.18
• build(deps): bump source-map-js from 1.2.1 to 1.2.2 in /frontend
• build(deps-dev): bump brace-expansion from 1.1.18 to 1.1.21 in /frontend
• Merge pull request #31 from Yogs4R/dependabot/npm_and_yarn/frontend/brace-expansion-1.1.21
• build(deps): bump postcss-selector-parser and tailwindcss in /frontend
• Merge pull request #30 from Yogs4R/dependabot/npm_and_yarn/frontend/source-map-js-1.2.2
• Merge pull request #32 from Yogs4R/dependabot/npm_and_yarn/frontend/multi-d49ef80a9c
• build(deps-dev): bump vite from 8.0.16 to 8.3.5 in /frontend
• Merge pull request #33 from Yogs4R/dependabot/npm_and_yarn/frontend/vite-8.3.5
• Merge pull request #34 from Yogs4R/feat/modern-sleek-redesign
• preview: add website result preview to README

---

Note: This changelog was automatically generated from commit messages with Github Action.

v0.0.2

Update Version 0.0.2

Contributors: @Yogs4R @dandy63609 @naufalid755 @luckywtrike-rgb

🚀 What's New

• feat: filter out dummy target_user from leaderboard and enhance username text contrast
• feat: optimize firestore reads with caching and add bottom cookie consent banner with GA Consent Mode v2
• feat(seo): fix GA4 CSP blocking, move gtag to head, add GEO structured data and llms.txt
• feat: enable and update rate limits to 5 requests per minute using rolling window
• feat: add .dockerignore in backend to exclude venv, database and caches
• feat: add transparent execution logging to stdout and save logs to Firestore
• feat: integrate X bot as FastAPI background task on startup inside main.py, disable X bot, update docs, and added new env
• feat: add Metric Details modal with raw tweets view and prevent test runs from polluting Firestore
• feat: added skeleton loading when process getting data from firestore

🐛 Bug Fixes

• fix: added h1 tag anda change title
• fix: slice scraped tweets to limit to prevent semantic similarity bypass

🛠 Maintenance & Refactor

• chore: migrate backend API url and deployment config to LacakBuzzer organization space
• chore(security): fix CSP unsafe-inline, add trusted-types policy, and extract inline analytics script
• refactor: update OpenRouter prompt to use formatted unicode bullet points on newlines

📚 Documentation

• docs: create PERSONA_IDEAL.md to document the scoring baseline and metrics
• docs: update readme files with architecture diagrams, security tables, and tech stack details

❓ Other Changes

• style: polish stats box titles contrast and fix double border in scans card
• build(deps-dev): bump vite from 8.0.14 to 8.0.16 in /frontend
• Merge pull request #9 from Yogs4R/dependabot/npm_and_yarn/frontend/vite-8.0.16
• build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 in /frontend
• Merge branch 'main' of https://github.com/Yogs4R/lacak-buzzer
• Merge pull request #10 from Yogs4R/dependabot/npm_and_yarn/frontend/js-yaml-4.2.0
• ci: add advanced security scanning workflow with gitleaks and trivy for backend image
• security: harden rate-limiting, input validation, CORS, Docker perms, bot backoff, pin deps, add Dependabot, update README security tables

---

Note: This changelog was automatically generated from commit messages with Github Action.

v0.0.1

FIRST RELEASE LACAK BUZZER

Contributors: @Yogs4R, @dandy63609, @naufalid755, @luckywtrike-rgb

🚀 What's New

• feat: add strict pydantic schemas and dummy analyze endpoint
• feat(backend): implement twscrape data collection and feature extraction metrics
• feat(frontend): refactor UI to Tailwind, add SVG Radar Chart, and implement scan counter
• feat: integrate real API analyze flow with client-side caching, local history controls, and bypassed rate limits for MVP
• feat: migrate from SQLite to Firebase Firestore,add new APIs, add stats grid, and resolve W3C/Fallow/PageSpeed validation issues

🐛 Bug Fixes

• fix: lower insufficient tweet threshold
• fix: resolve hf deployment workflow subtree error and add VITE_API_URL resolve
• fix: add CORS middleware to allow cross-origin API calls from Cloudflare to Hugging Face
• fix: change colorTo in Hugging Face metadata README to yellow to pass YAML validation
• fix: relocate accounts.db to writeable data folder to fix Hugging Face read-only startup crash
• fix: Change CORS allowed origin for pages.dev
• fix: permit Hugging Face origin in CSP connect-src and optimize getApiUrl fallback
• fix: make Try X Bot button fully responsive on mobile layout
• fix: respect TWS_DATA_DIR for twscrape db path in scraper and tests
• fix(frontend): replace dummy statistics with real API stats and clean up FAQ

🛠 Maintenance & Refactor

• chore(SEO): enhance index.html with comprehensive SEO meta tags and PWA manifest
• chore: migrate backend to Hugging Face Spaces and optimize production headers
• chore: change cloudflare pages project name
• chore: add Hugging Face configuration metadata README to backend folder
• chore: add local scraper connection test diagnostic script

📚 Documentation

• docs: menambahkan dokumentasi struktur proyek, aturan kolaborasi tim, dan konfigurasi .gitignore yang aman
• docs: Added PROGRESS.md & BRAND_RESOURCES.md, update README & dependency @vitejs/plugin-react

❓ Other Changes

• Add strict PR inspection workflow
• Add files via upload
• Merge branch 'main' of https://github.com/Yogs4R/lacak-buzzer
• build(deps): bump pytest from 8.0.2 to 9.0.3 in /backend
• build(deps): bump esbuild and vite in /frontend
• Add files via upload
• Add files via upload
• Add files via upload
• Rename Logo 3-1_Lacak Buzzer Transparan.webp to lacak-buzzer-logo.webp
• Delete frontend/public/favicon_io.zip
• Rename Logo 1200-630 (Open Graph Image)_Lacak Buzzer (Dark Mode).png to og-image.png
• Add files via upload
• Merge pull request #3 from Yogs4R/dependabot/npm_and_yarn/frontend/multi-1b777957f8
• Merge pull request #1 from Yogs4R/dependabot/pip/backend/pytest-9.0.3
• Update DESIGN.md
• Update DESIGN.md
• Add files via upload
• Merge branch 'main' of https://github.com/Yogs4R/lacak-buzzer
• Merge branch 'main' of https://github.com/Yogs4R/lacak-buzzer
• frontend BRAND_RESOURC
• Added _bmad at .gitignore for security
• Merge branch 'feature/scoring-buzzer'
• Merge pull request #4 from Yogs4R/feature/scoring-buzzer
• Merge pull request #5 from Yogs4R/feature/scoring-buzzer
• Ignore pytest cache folders
• task 3 phase 3
• task 3 phase 3
• test: define scoring contract
• Merge branch 'main' into feature/scoring-buzzer
• Merge pull request #6 from Yogs4R/feature/scoring-buzzer
• Update ResultCard.jsx
• Update Footer.jsx
• Update index.css
• Update App.jsx
• tambah Phase 5 : skeneario gagal
• Phase 6: implementasi safety audit tampilan kartu hasil dan fallback AI
• Phase 6: polish dikit agar logo di footer sedikit lebih besar
• Phase 6: polish dikit agar logo di footer sedikit lebih besar
• Potential fix for code scanning alert no. 4: Incomplete URL substring sanitization
• Delete LICENSE
• Update copyright year and owners in LICENSE file (Apache 2.0)
• Merge pull request #7 from Yogs4R/url-substring-sanization
• added new file at .gitignore for safety
• security: limit GITHUB_TOKEN permissions to read-only in deploy workflow
• security: restrict CORS allowed origins to trusted development and production domains
• Log API URL for debugging purposes
• Bot trigger workflow on X
• Trigger from X got into backend
• testing the trigger for bot
• Merge pull request #8 from Yogs4R/feature/scorring-buzzer
• Update API URL to use hardcoded string
• style: improve header mobile responsiveness and fix test_scraper
• delete accounts.db for safety
• style(header): center Home, About, and FAQ navigation links horizontally

---

Note: This changelog was automatically generated from commit messages with Github Action.