Skip to content

Releases: too-many-secrets/ideablock-commit

v3.1.2

Choose a tag to compare

@github-actions github-actions released this 27 Aug 16:42
3.1.2 — one anchor format in the docs

v3.1.1

Choose a tag to compare

@github-actions github-actions released this 27 Aug 16:20
v3.1.1 — supported clients named, ports demoted to reference

Node CLI and the Go binary are the two supported clients. The other
seven language ports are reference implementations and say so; they are
not built, released, or kept in step.

ports/ no longer ships in the npm tarball — 46 files to 15 — which is
where two stale-config bugs reached users this week.

The post-commit hook is written rather than echoed into place, so it
works on Windows and no longer destroys a hook the user already had.
Every port anchors the same composite, through the authenticated proxy,
and the parity digit is derived so the whole value is reproducible from
the archive alone.

v3.0.1

Choose a tag to compare

@github-actions github-actions released this 27 Aug 15:14
Windows hook fix

v3.0.0

Choose a tag to compare

@github-actions github-actions released this 27 Aug 15:00
v3.0.0 — one anchored value, through the authenticated proxy

Every port now anchors the same composite, and the parity digit is
derived rather than random, so the whole 72-character payload is
reproducible from the archive alone.

Ports post to POST /api/commit-ideas/glue with the token they already
held, instead of straight to timeglue with a userID and no token.
Release binaries carry the production API URL via -ldflags -X; before
this, a downloaded binary pointed at localhost.

Dependencies: 13 advisories (2 critical) down to 3.

Breaking: the on-chain payload changes meaning. See the anchor-format
table in the README before verifying older stamps.

v2.1.0

Choose a tag to compare

@github-actions github-actions released this 05 Aug 17:33
v2.1.0 — log in once per machine

The CLI stored the ordinary 15-minute access token and treated it as its
login, so it stopped working a quarter of an hour after init, in every
repo. It now mints a long-lived, commit-scoped token instead.

The token is accepted only by the commit endpoints, stored hashed
server-side, and revocable from Settings or by logging out — which now
actually revokes rather than just deleting the local file.

Both the Node client and the Go port (the standalone binaries) carry the
fix. Banner reads IDEABLOCK COMMIT, and the signup link points at
ideablock.com rather than a domain with no mail authentication.

v2.0.0

Choose a tag to compare

@github-actions github-actions released this 07 Jul 13:54
Add GitHub release workflow (Go binaries) + Homebrew formula

- .github/workflows/release.yml: on a v* tag, cross-compiles the Go port to
  standalone binaries (darwin/linux/windows, amd64+arm64) and attaches them
  to the GitHub Release — backs the 'download the latest binary' option.
- packaging/homebrew/ideablock-commit.rb: Homebrew formula that installs the
  published npm CLI; drop into a homebrew-tap repo's Formula/ dir.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>