Catch 0.3.0-preview

Changes since 0.2.4-preview.

Compatibility: API protocol: app 1 → 2; server supports 1 → 2. Update the server first, then every app: apps from the previous release cannot sync with this server, and this app cannot sync with the previous server. Local notes and queued writes are kept while sync is paused.

Breaking changes

• tags: add nested tags and search filters (#3)
  • clients and servers now require API protocol 2. Upgrade the server before clients; queued writes and device notes retain their existing formats.
• security: harden exposed servers and add admin invites (#5)
  • sign-up is closed after the first account by default; set REGISTRATION=open to add accounts. The bare session token from a sign-in response body is no longer accepted as a bearer token; use the set-auth-token header value. Restoring a backup signs everyone out except the admin who started it.

Features

• release: add manual channel and version bump workflow (#11)
• web: prompt to reload outdated browser builds (#7)

Fixes

• release: name the image and APK inside the jobs that use them (#16)

Other changes (5)

• chore: drop personal notes and regenerate the video fixture (#14)
• test(e2e): wait for the first note to sync before cutting off the API (#12)
• docs(review): let agents request AI reviews for higher-risk changes (#10)
• ci(release): build Android and Docker images in parallel (#8)
• ci(review): add opt-in cubic reviews (#6)

Full changelog: v0.2.4-preview...v0.3.0-preview

Release details

Channel: preview

Docker image: ghcr.io/iiloni/catch:0.3.0-preview

Pinned Docker image: ghcr.io/iiloni/catch@sha256:da6cc7f6e401cd879bf5b97c8d995072ee9cc1fbcb888177f14dcf939fcfd520

Source commit: c8d54eefbe1d366b4a01c1ded4967bb3fdb9d5b6

Android version code: 9

Download the signed APK and its SHA-256 checksum below. Stable and preview Android apps can be installed together.