v0.10.0-alpha.0

BREAKING CHANGES

• Grant-based auth (PR #373 by @SeverinAlexB)
• deeplink refactor (PR #392 by @SeverinAlexB)
• Grant auth for the JS SDK (PR #405 by @SeverinAlexB)
• Renamed startAuthFlow to startCookieAuthFlow + Cookie migration guide (PR #460 by @SeverinAlexB)

New Features

• hs/sdk/common: Grant-based auth (PR #373 by @SeverinAlexB)
• sdk: restore grant session (PR #400 by @SeverinAlexB)
• sdk: deeplink refactor (PR #392 by @SeverinAlexB)
• js-sdk: Grant auth for the JS SDK (PR #405 by @SeverinAlexB)
• Add docker build pipeline (PR #416 by @SpontaneousOverthrow)
• add list signup tokens endpoint
• allow writes to /priv folder
• homeserver: authenticated reads + listing authz for /priv (PR #448 by @MCarlomagno)
  • addresses issue #433 opened by @MCarlomagno
  • addresses issue #434 opened by @MCarlomagno
  • addresses issue #437 opened by @MCarlomagno
• OpenAPI yaml (PR #406 by @86667)
  • addresses issue #369 opened by @86667
• filter private events from events endpoint (PR #454 by @MCarlomagno)
  • addresses issue #436 opened by @MCarlomagno
• sdk: Renamed startAuthFlow to startCookieAuthFlow + Cookie migration guide (PR #460 by @SeverinAlexB)

Bug Fixes

• changes from review
• use NonZerou16 for limit
• sdk: resolve transport with the full _pubky. qname so ICANN fallback applies (PR #423 by @SHAcollision)
  • fixes issue #422 opened by @SHAcollision
• release: Allow hot-fixing (PR #453 by @86667)
• sdk: disable TLS revocation hard-fail on ICANN HTTP client (false Revoked errors on Android) (PR #456 by @coreyphillips)
• path collisions (PR #424 by @MCarlomagno)
  • fixes issue #419 opened by @andrei-21
• homeserver: reject directory paths on writes (PR #445 by @andrei-21)

Refactors

• sdk: Extract grant management from session to its own GrantManager (PR #412 by @SeverinAlexB)

Tests

• better coverage for cursor and pagination

Build System

• homeserver: set default run binary to pubky-homeserver (PR #452 by @andrei-21)
• add Context7 refresh workflow

Documentation Changes

• fix rustdoc links (PR #447 by @andrei-21)
• add DeepWiki badge to README (PR #450 by @ok300)
• testnet: gate Docker Postgres doctest by feature (PR #461 by @andrei-21)

Chores

• deps: update pkarr to 6.0.1 (PR #404 by @andrei-21)
• deps: remove nested wasm lockfile (PR #415 by @andrei-21)
• deps: separate library dependency ranges (PR #414 by @andrei-21)
• cargo: centralize workspace manifest metadata (PR #417 by @andrei-21)
• deps: remove unused crate dependencies (PR #455 by @andrei-21)