v0.6.1

Security

• Audit the workflows with actionlint and zizmor in a new lint job.
• Lint the Dockerfile (Hadolint, trivy config) and the entrypoint (ShellCheck) in the lint job.
• Add the OpenSSF Scorecard workflow and its README badge.
• Limit the token permissions of every workflow.
• Stop persisting the checkout credentials.
• Let Renovate pin GitHub Actions by commit digest.
• Let Renovate refresh package-lock.json and raise OSV vulnerability alerts.
• Attest the published image: signed build provenance and an SPDX SBOM.
• Attach the provenance bundle and the SBOM to the GitHub release as assets.
• Renovate takes its common rules from the shared preset github>grigoriev/renovate-config.

Added

• CHANGELOG.md, and Verify, Contributing and Disclaimer sections in the README.

Changed

• Draw the job progress with a native <progress> element, styled like before.
• Trim trailing slashes of a release path without a backtracking regex.

Fixed

• Run CI once per commit on a Renovate branch: drop renovate/** from the push trigger.

v0.6.0

What's Changed

• feat: use the name the library can read by @grigoriev in #44
• chore: bump version to 0.6.0 by @grigoriev in #45

Full Changelog: v0.5.0...v0.6.0

v0.5.0

What's Changed

• feat: let a wrong TMDb match be corrected before sending by @grigoriev in #41
• chore: bump version to 0.5.0 by @grigoriev in #42

Full Changelog: v0.4.3...v0.5.0

v0.4.3

What's Changed

• fix: let the page use the width a release name needs by @grigoriev in #38
• feat: name the running versions in the header by @grigoriev in #40
• chore: bump version to 0.4.3 by @grigoriev in #39

Full Changelog: v0.4.2...v0.4.3

v0.4.2

What's Changed

• feat: widen the list and leave one button per row by @grigoriev in #36
• chore: bump version to 0.4.2 by @grigoriev in #37

Full Changelog: v0.4.1...v0.4.2

v0.4.1

What's Changed

• feat: read a title before sending it, and send it in one press by @grigoriev in #34
• chore: bump version to 0.4.1 by @grigoriev in #35

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• chore(deps): pin caddy docker tag to 5f5c864 by @renovate[bot] in #25
• chore(deps): update testing-library monorepo by @renovate[bot] in #26
• chore(deps): update vitest monorepo to v4.1.11 by @renovate[bot] in #27
• chore(deps): update dependency oxlint to v1.79.0 by @renovate[bot] in #28
• chore(deps): update docker/setup-buildx-action action to v4.3.0 - autoclosed by @renovate[bot] in #29
• chore(deps): update dependency vite to v8.2.2 by @renovate[bot] in #30
• chore(deps): update dependency @vitejs/plugin-react to v6.1.0 by @renovate[bot] in #31
• feat: give each torrent a start button and a live row by @grigoriev in #32
• chore: bump version to 0.4.0 by @grigoriev in #33

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• fix: stop the poster from stretching by @grigoriev in #20
• feat: show what a job transferred by @grigoriev in #21
• feat: ask before a transfer replaces the library by @grigoriev in #22
• feat: show transfer status in the torrent list, and job logs by @grigoriev in #23
• chore: bump version to 0.3.0 by @grigoriev in #24

Full Changelog: v0.2.0...v0.3.0

v0.2.0

What's Changed

• feat: delete a job from the list by @grigoriev in #17
• feat: ui polish - tab in the url, Escape, posters by @grigoriev in #18
• chore: bump version to 0.2.0 by @grigoriev in #19

Full Changelog: v0.0.6...v0.2.0

v0.0.6

Sign-in screen backed by the server session, and a sign-out button (#16).