v0.10.0

Before you upgrade

This upgrade is one-way. Migrations run forward only. An older
binary opens a newer database without complaint and then runs every
destination with an empty stream key — enabled, live, publishing
nothing, with no error anywhere. Rolling back is not a supported
recovery path; restoring your backup is.

Back up the whole data directory, not just polyemesis.db.
Since 0.7.0 destination stream keys are sealed at rest with
secret.key. A database restored without that file comes back with
every destination disabled — by design, because a key that will not
open disables its destination rather than failing open. That restore
looks completely successful until someone goes live.

Re-run install.sh before upgrading an install older than 0.7.0.
update.sh and uninstall.sh are written to disk when you install,
so an older install is running older helpers — including one whose
backup check does not know to look for secret.key. Re-running the
installer regenerates them. See
docs/UPGRADING.md.

Windows is tested, not operated. Two known unresolved defects:
recordings are truncated on service stop, and #440 — an intermittent
Go runtime abort that ends the process mid-broadcast. See
docs/INSTALL.md.

Verify your download against SHA256SUMS, published below.

---

What's Changed

• docs: correct four defects found by a documentation review by @rainmanjam in #753
• fix(web): the site shipped screenshots eight days older than the docs by @rainmanjam in #754
• fix(web): two advisories published since the last green run by @rainmanjam in #767
• chore(deps): bump astro from 7.2.9 to 7.3.1 in /web by @dependabot[bot] in #765
• chore(deps): bump motion from 13.1.1 to 13.2.0 in /web by @dependabot[bot] in #763
• chore(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #755
• chore(deps-dev): bump the dev-tooling group in /ui with 2 updates by @dependabot[bot] in #757
• chore(deps-dev): bump wrangler from 4.127.1 to 4.129.0 in /web in the dev-tooling group across 1 directory by @dependabot[bot] in #761
• chore(deps): bump the go-minor-and-patch group with 2 updates by @dependabot[bot] in #756
• chore(deps): bump lucide-react from 1.37.0 to 1.41.0 in /ui by @dependabot[bot] in #758
• chore(deps): bump hls.js from 1.7.1 to 1.7.2 in /ui by @dependabot[bot] in #759
• chore(deps-dev): vitest 5 across both workspaces, as one commit by @rainmanjam in #790
• fix(ui): twenty-one capabilities the server had and no operator could reach by @rainmanjam in #789
• feat(design): execute the design system — one palette, one type scale, both surfaces by @rainmanjam in #766
• docs(media): recapture every screenshot against the design system by @rainmanjam in #791
• fix(engine): a preview start whose hub vanishes kept its relay port by @rainmanjam in #792
• test(ports): draw test ports below the OS dynamic range (#752) by @rainmanjam in #793
• chore: refresh the GitNexus index counts by @rainmanjam in #794
• feat(web): automatic moderation on the features page, and a guard for claims by @rainmanjam in #795
• fix(ci): pick the newest whisper.cpp release that carries the binary by @rainmanjam in #797
• chore(deps): hold typescript 7 in web/, and close the standing red PR by @rainmanjam in #796
• test(engine): pin the invariant two unguarded Subscribe calls rest on by @rainmanjam in #809
• fix(capture): seed a mix-matrix destination, and correct two captions it exposed by @rainmanjam in #811
• chore(deps): bump the go-minor-and-patch group with 5 updates by @dependabot[bot] in #800
• chore(deps-dev): bump wrangler from 4.129.0 to 4.131.1 in /web in the dev-tooling group by @dependabot[bot] in #798
• chore(deps): bump @astrojs/markdown-satteri from 0.3.8 to 0.4.1 in /web by @dependabot[bot] in #801
• chore(deps): bump astro from 7.3.1 to 7.3.2 in /web by @dependabot[bot] in #803
• chore(deps-dev): bump the dev-tooling group in /ui with 3 updates by @dependabot[bot] in #804
• chore(deps): bump hls.js from 1.7.2 to 1.7.3 in /ui by @dependabot[bot] in #805
• chore(deps): bump @astrojs/sitemap from 3.7.3 to 3.7.4 in /web by @dependabot[bot] in #802
• chore(deps): bump lucide-react from 1.41.0 to 1.45.0 in /ui by @dependabot[bot] in #807
• chore(deps): react 19.3 as one bump, and a guard that sees the next split pair by @rainmanjam in #812
• chore(deps): mermaid 12, with the lodash-es advisory its new dependency carries by @rainmanjam in #813
• docs: what gitnexus impact does not see, and why a zero is not an answer by @rainmanjam in #814
• ci: two checks that could only ever report, and now block by @rainmanjam in #815
• docs: where the work on 21 deleted branches went by @rainmanjam in #816
• docs: name the three tag namespaces, and correct the archive note by @rainmanjam in #817
• fix(web): a competitor's price was wrong on the live site, and nothing could say so by @rainmanjam in #819
• docs(changelog): the entry #819 merged without, and the 0.10.0 body it joins by @rainmanjam in #818
• docs(automod): the rule examples an operator needs, and a test that runs them by @rainmanjam in #820
• docs: close 105 gaps a code-vs-doc audit found across twelve files by @rainmanjam in #821
• release: v0.10.0 by @rainmanjam in #822
• release: date v0.10.0 for the day it is actually tagged by @rainmanjam in #836
• release: date v0.10.0 in UTC, which is what the gate compares by @rainmanjam in #837

Full Changelog: v0.9.0...v0.10.0