v0.0.12

   🐞 Bug Fixes

• api:
  • Build on Go 1.27.2 and x/net 0.60.0 to clear 12 reachable stdlib advisories  -  by @productdevbook and Claude Opus 5.5 in #46 (f78d7)
  • List confirmation must not grant address ownership; require manager for GET /v1/usage  -  by @productdevbook and Claude Opus 5.5 in #47 (c3416)
  • Deleted workspaces stop getting analytics mail and lose their migration uploads  -  by @productdevbook and Claude Opus 5.5 in #48 (a6fcd)
  • Re-check inbox access before pushing broadcast reply counts  -  by @productdevbook and Claude Opus 5.5 in #49 (3ddb8)
  • Re-check inbox access on every push attempt  -  by @productdevbook and Claude Opus 5.5 in #50 (18854)
  • Delete a contact's files from conversations they did not own  -  by @productdevbook and Claude Opus 5.5 in #50 (18854)
  • A share link cannot order rows by a metric it does not show  -  by @productdevbook and Claude Opus 5.5 in #50 (18854)
  • Refuse a passkey sign-in whose signature counter went backwards  -  by @productdevbook and Claude Opus 5.5 in #50 (18854)
• sdk/kotlin:
  • Seal the contact session token with a device-bound key  -  by @productdevbook and Claude Opus 5.5 in #50 (18854)
• sdk/swift:
  • Keep the contact session token on this device only  -  by @productdevbook and Claude Opus 5.5 in #50 (18854)
• widget:
  • Apply chat styles with adoptedStyleSheets so a strict style-src CSP accepts them  -  by @productdevbook and Claude Opus 5.5 in #44 (9fd11)

    View changes on GitHub