v1.4.6

1.4.6 (2026-09-17)

Bug Fixes

• ci: pin yt-dlp builds (#58) (ffcbf0a)
• filesystem: propagate File.rmdir errors in empty-directory cleanup (#93) (23f3a17)
• http: cap the size of responses the shared HTTP client buffers (#56) (9495ce3)
• http: match any 2xx status in HTTPClient.get/3 (#87) (cda0106), closes #83
• podcasts: strip XML 1.0 forbidden control characters from RSS feed fields (#88) (d0a78f3)
• rollback: delete ROLLBACK.md and rollback.sh, which describe a different downstream (#95) (74e4820)
• security: deny /dev/dashboard when basic auth is not configured (#105) (fcfbb6c), closes #103
• slow_indexing: stop FileFollowerServer gracefully when watched file is missing or unreadable (#90) (ceaa9c0), closes #85
• sources: ignore unknown sort keys on the sources index instead of crashing (#91) (f6a2e5b), closes #80
• URL-encode API keys and pinned versions in outbound request URLs (#94) (be6c6cb), closes #81

Chores

• diagnostics: show full last-attempt error instead of truncating to 200 chars (#89) (978dd42), closes #86
• diagnostics: use String.to_existing_atom/1 in queue job counts (#92) (d81e4d9), closes #79
• update native loop settings (#104) (839d993)

Documentation

• correct stale references in CONTRIBUTING, CODEBASE, and DEVELOPMENT (#96) (24b359f)

v1.4.5

1.4.5 (2026-08-25)

Bug Fixes

• config: generate Plug-compatible 64-byte self-hosted secret keys (#54) (165879a)

v1.4.4

1.4.4 (2026-08-22)

Bug Fixes

• 11: Harden default SECRET_KEY_BASE for self-hosted prod (08865c1)
• 18: repair ObanRescheduleHelper tests (#41) (2cdb413)
• make feed-route header scoping pass the CI gate (138572f)
• sanitize media titles in stream headers (8e1af80), closes #48
• test: rebase all /app paths, not just /app/test (edf5fe4)
• test: stop hardcoding the /app checkout path (e3a8081)
• test: stop hardcoding the /app checkout path in fixtures (6a0140a)
• web: compare route token in constant time (#51) (0f4df5e), closes #47

Chores

• add CODEOWNERS (12f27ec)
• ci: add mix deps.audit to the mix check gate (fffde16)
• nudge workflow registration (6454d67)
• rehome to misospace namespace (81a7e4f)

Documentation

• consolidate CLAUDE.md into a single AGENTS.md (a53b6a6)
• consolidate CLAUDE.md into a single AGENTS.md (b12befc)
• issue contract for the autonomous loop (1d5c09f)
• issue contract for the autonomous loop (template + AGENTS.md) (cce814c)
• preserve upstream rollback script for migrating back to original pinchflat (00836aa)

Styles

• format media.ex per .formatter.exs (40511d5)
• format media.ex per .formatter.exs (591ab24)
• prettier-format agent-task.yml and AGENTS.md (f710026)