oscbot
released this
2026-06-09 11:51:18 +02:00
| 47 commits to main since this release
4.8.0 (2026-06-09)
Features
- back the rate limiter with Postgres for multi-replica budgets (fa6e97a)
- fan out live CI frames via Postgres LISTEN/NOTIFY (01e4dce)
Bug Fixes
- add a replay-safe signature scheme to the ci-status webhook (7c910a6)
- bail instead of caching an empty osu! access token (4645a79)
- bound push-triggered tag ingests and prune atomically on reproject (0ff4ffd)
- build media response headers without panicking on bad metadata (32ada54)
- cap admin uploads instead of leaving the spool unbounded (c44121d)
- guard CI phase merge against a non-object snapshot (c64bbf1)
- guard the LFS S3 key against a malformed oid (4b064f4)
- key XFF-less direct callers by peer IP for rate limiting (4e43110)
- re-check the admin allowlist on every request (04e7377)
- reject non-release tags on the ci-status ingest path (f28c139)
- stop following redirects and cap response size in the avatar proxy (c691228)
Performance Improvements
- batch pick validation into one skin lookup (08066f2)
- index community_skins by tag (2bc5edb)
Refactors
- drop unused mark_repo_done (a707955)
Tests
- mock the batch osu user endpoint so identity resolution resolves (9b85e7b)
Downloads