oscbot
released this
2026-06-09 10:56:54 +02:00
| 158 commits to beta since this release
Bug Fixes
- add a replay-safe signature scheme to the ci-status webhook (0fa97e7)
- bail instead of caching an empty osu! access token (31e02a1)
- bound push-triggered tag ingests and prune atomically on reproject (450860a)
- build media response headers without panicking on bad metadata (e431692)
- cap admin uploads instead of leaving the spool unbounded (909b77a)
- guard CI phase merge against a non-object snapshot (f6c6419)
- guard the LFS S3 key against a malformed oid (9f54f66)
- key XFF-less direct callers by peer IP for rate limiting (14c43cd)
- re-check the admin allowlist on every request (7652a80)
- reject non-release tags on the ci-status ingest path (5cbdcce)
- stop following redirects and cap response size in the avatar proxy (4ddea19)
Performance Improvements
- batch pick validation into one skin lookup (da2922e)
- index community_skins by tag (0bb26af)
Refactors
- drop unused mark_repo_done (5d6c80f)
Tests
- mock the batch osu user endpoint so identity resolution resolves (250ecff)
Downloads