v0.2.4

Security rebuild of the server image. No functional changes.

• Runtime stage moved to gcr.io/distroless/cc-debian13:nonroot (uid 65532, no shell), clearing the remaining unfixable Debian base CRITICAL/HIGH findings. CI and the GAR publish workflow now smoke-test the built image before pushing (#96). SDK packages unchanged (no npm publish).

Full Changelog: v0.2.3...v0.2.4

v0.2.3

Security rebuild of the server image. No functional changes.

• Docker runtime stage now runs apt-get upgrade, clearing the Debian 13.5 fixable CRITICAL/HIGH findings (perl-base, util-linux family, pcre2, …) in #95. SDK packages unchanged (no npm publish).

Full Changelog: v0.2.2...v0.2.3

v0.2.2

Patch release validating npm Trusted Publishing (OIDC) — tokenless publish. No functional changes.

v0.2.1

Chimely's public launch release.

• @chimely/client and @chimely/react 0.2.1 on npm, now with package READMEs and npm provenance.
• The GHCR image ghcr.io/dodopayments/chimely:0.2.1 is multi-arch (amd64 + arm64, built natively).
• React: the bundle carries its own 'use client' directive, the bell's accessible name includes the unseen count, and INBOX_CSS is exported for strict-CSP hosts.
• Server: config Debug output redacts credentials; cross-environment isolation gains an eight-test regression pack.
• Docs: the quickstart runs entirely from published artifacts, nothing to clone.

What's Changed

• docs: bump version references to 0.2.0 by @that-ambuj in #51
• ci: native multi-arch release images by @that-ambuj in #52
• docs: clone-free quickstart and audit fixes by @that-ambuj in #53
• docs: registry READMEs, CONTRIBUTING, crate metadata by @that-ambuj in #54
• fix(server): redact credentials in Config Debug by @that-ambuj in #57
• fix(react): use client banner, a11y count, CSP escape by @that-ambuj in #59
• test(bench): db hot-path EXPLAIN harness by @that-ambuj in #60
• test(bench): sse concurrency harness by @that-ambuj in #62
• test(redteam): cross-env isolation pack by @that-ambuj in #63
• Version Packages by @github-actions[bot] in #64

New Contributors

• @github-actions[bot] made their first contribution in #64

Full Changelog: v0.2.0...v0.2.1

v0.2.0

First feature release of the SDK packages: @chimely/client 0.2.0 and @chimely/react 0.2.0.

@chimely/react

• Composable components: <InboxContent />, <Bell />, <Preferences />, plus granular render props (renderSubject, renderBody, renderAvatar).
• Tabs with client-side filtering, per-tab unread counts, and full keyboard support.
• Popover portal mode, controlled open/onOpenChange, placementOffset, and routerPush SPA navigation. react-dom is now a peer dependency.
• Theming depth: darkTheme preset, per-slot appearance.styles, appearance.icons, new variables.
• New-notification pill, relative timestamps, header title, renderFooter, and a localization pass.
• Read state and archive UI: hover toggles, view select (Inbox / Unread / Archived), and a header more-actions menu (mark all read, archive read, archive all).

@chimely/client

• markUnread and setFilter('default' | 'unread' | 'archived') server-side views.
• archive, unarchive, archiveAll, archiveRead with optimistic updates and rollback.
• InboxSnapshot.lastRefreshNewItemIds for arrival indicators.

Server: mark-unread overrides and the archive plane (watermark + overrides + resumable chunked archive-read job) across both inbox sources, per-view filtered lists, and the ETag/count surfaces to match.

Full changelogs: packages/client/CHANGELOG.md, packages/react/CHANGELOG.md. Closes the scoped work from #34 (PRs #40-#48).

v0.1.2

What's Changed

• feat(server): redirect / to the admin dashboard by @that-ambuj in #25
• fix(admin): admin login in dev by @that-ambuj in #26
• feat(server): include build version in /healthz by @that-ambuj in #27
• chore(release): server 0.1.2 by @that-ambuj in #28

Full Changelog: v0.1.1...v0.1.2

v0.1.1

Server-only patch release.

Fixes

• server: init telemetry inside the tokio runtime (#23). The OTLP exporter builds a tonic/hyper client that needs a running reactor, so telemetry::init() now runs on the runtime instead of before it.

SDK packages (@chimely/client, @chimely/react) are unchanged and remain at 0.1.0.

Full changelog: v0.1.0...v0.1.1

v0.1.0

The first release of Chimely — self-hostable in-app notification inbox infrastructure: one Rust binary + Postgres + Redis, a small HTTP API, and a drop-in <Inbox /> for React.

What's in it

• Server (AGPL-3.0) — the chimely binary. Postgres is the source of truth, Redis is the real-time plane. Docker image published to ghcr.io/dodopayments/chimely:0.1.0 (and to GAR).
• SDKs (MIT), on npm at 0.1.0:
  • @chimely/client — headless TypeScript core
  • @chimely/react — hooks + <Inbox />

Install

npm i @chimely/react
docker pull ghcr.io/dodopayments/chimely:0.1.0

Pre-1.0 note

Chimely is at v0.1.0 — the HTTP API and SDK surface may still change on minor releases until 1.0. Pin your versions.