• v4.8.1 1831366853

    v4.8.1 Stable

    oscbot released this 2026-06-09 12:32:19 +02:00 | 154 commits to main since this release

    4.8.1 (2026-06-09)

    Bug Fixes

    • require a signed ci-status request and drop the legacy bearer (7851d57)
    Downloads
  • v4.8.1-beta.1 a2f1dbeb91

    v4.8.1-beta.1 Stable

    oscbot released this 2026-06-09 12:03:20 +02:00 | 151 commits to beta since this release

    4.8.1-beta.1 (2026-06-09)

    Bug Fixes

    • require a signed ci-status request and drop the legacy bearer (7851d57)
    Downloads
  • v4.8.0 e349d0bf46

    v4.8.0 Stable

    oscbot released this 2026-06-09 11:51:18 +02:00 | 159 commits to main since this release

    4.8.0 (2026-06-09)

    Features

    • back the rate limiter with Postgres for multi-replica budgets (fa6e97a)
    • fan out live CI frames via Postgres LISTEN/NOTIFY (01e4dce)

    Bug Fixes

    • add a replay-safe signature scheme to the ci-status webhook (7c910a6)
    • bail instead of caching an empty osu! access token (4645a79)
    • bound push-triggered tag ingests and prune atomically on reproject (0ff4ffd)
    • build media response headers without panicking on bad metadata (32ada54)
    • cap admin uploads instead of leaving the spool unbounded (c44121d)
    • guard CI phase merge against a non-object snapshot (c64bbf1)
    • guard the LFS S3 key against a malformed oid (4b064f4)
    • key XFF-less direct callers by peer IP for rate limiting (4e43110)
    • re-check the admin allowlist on every request (04e7377)
    • reject non-release tags on the ci-status ingest path (f28c139)
    • stop following redirects and cap response size in the avatar proxy (c691228)

    Performance Improvements

    • batch pick validation into one skin lookup (08066f2)
    • index community_skins by tag (2bc5edb)

    Refactors

    • drop unused mark_repo_done (a707955)

    Tests

    • mock the batch osu user endpoint so identity resolution resolves (9b85e7b)
    Downloads
  • v4.8.0-beta.1 209dcb879c

    v4.8.0-beta.1 Stable

    oscbot released this 2026-06-09 11:07:23 +02:00 | 156 commits to beta since this release

    4.8.0-beta.1 (2026-06-09)

    Features

    • back the rate limiter with Postgres for multi-replica budgets (fa6e97a)
    • fan out live CI frames via Postgres LISTEN/NOTIFY (01e4dce)

    Bug Fixes

    • add a replay-safe signature scheme to the ci-status webhook (7c910a6)
    • bail instead of caching an empty osu! access token (4645a79)
    • bound push-triggered tag ingests and prune atomically on reproject (0ff4ffd)
    • build media response headers without panicking on bad metadata (32ada54)
    • cap admin uploads instead of leaving the spool unbounded (c44121d)
    • guard CI phase merge against a non-object snapshot (c64bbf1)
    • guard the LFS S3 key against a malformed oid (4b064f4)
    • key XFF-less direct callers by peer IP for rate limiting (4e43110)
    • re-check the admin allowlist on every request (04e7377)
    • reject non-release tags on the ci-status ingest path (f28c139)
    • stop following redirects and cap response size in the avatar proxy (c691228)

    Performance Improvements

    • batch pick validation into one skin lookup (08066f2)
    • index community_skins by tag (2bc5edb)

    Refactors

    • drop unused mark_repo_done (a707955)

    Tests

    • mock the batch osu user endpoint so identity resolution resolves (9b85e7b)
    Downloads
  • v4.7.0-beta.5 faf9c1144e

    v4.7.0-beta.5 Stable

    oscbot released this 2026-06-09 10:56:54 +02:00 | 158 commits to beta since this release

    4.7.0-beta.5 (2026-06-09)

    Bug Fixes

    • add a replay-safe signature scheme to the ci-status webhook (0fa97e7)
    • bail instead of caching an empty osu! access token (31e02a1)
    • bound push-triggered tag ingests and prune atomically on reproject (450860a)
    • build media response headers without panicking on bad metadata (e431692)
    • cap admin uploads instead of leaving the spool unbounded (909b77a)
    • guard CI phase merge against a non-object snapshot (f6c6419)
    • guard the LFS S3 key against a malformed oid (9f54f66)
    • key XFF-less direct callers by peer IP for rate limiting (14c43cd)
    • re-check the admin allowlist on every request (7652a80)
    • reject non-release tags on the ci-status ingest path (5cbdcce)
    • stop following redirects and cap response size in the avatar proxy (4ddea19)

    Performance Improvements

    • batch pick validation into one skin lookup (da2922e)
    • index community_skins by tag (0bb26af)

    Refactors

    • drop unused mark_repo_done (5d6c80f)

    Tests

    • mock the batch osu user endpoint so identity resolution resolves (250ecff)
    Downloads
  • v4.7.0-beta.4 d47e3e7844

    v4.7.0-beta.4 Stable

    oscbot released this 2026-06-09 01:56:13 +02:00 | 176 commits to beta since this release

    4.7.0-beta.4 (2026-06-08)

    Features

    • back the rate limiter with Postgres for multi-replica budgets (1fb3bbb)
    • fan out live CI frames via Postgres LISTEN/NOTIFY (336d694)
    Downloads
  • v4.7.0 5d6d3e5ba9

    v4.7.0 Stable

    oscbot released this 2026-06-09 01:33:16 +02:00 | 181 commits to main since this release

    4.7.0 (2026-06-08)

    Features

    • add /api/changelog merging Forgejo release notes (9d9c14a)
    • paginate changelog releases for full stable history (87e207a)

    Bug Fixes

    • exclude prerelease tags from the changelog feed (33b4634)

    Reverts

    • Revert "ci: mark beta releases as prerelease in Forgejo" (4db2917)

    CI

    • exempt the labeled renovate tool-cache volume from the DinD volume prune (a0e1486)
    • exempt the labeled renovate tool-cache volume from the DinD volume prune (0c5daf3)
    • mark beta releases as prerelease in Forgejo (dc27338)
    • renovate: rebase-merge deps, rebase every run, prune stale branches (f84c3ab)
    Downloads
  • v4.7.0-beta.3 26a3a99dbd

    v4.7.0-beta.3 Stable

    oscbot released this 2026-06-09 01:07:18 +02:00 | 180 commits to beta since this release

    4.7.0-beta.3 (2026-06-08)

    Features

    • paginate changelog releases for full stable history (69ab719)

    CI

    • exempt the labeled renovate tool-cache volume from the DinD volume prune (e71e0fb)
    Downloads
  • v4.7.0-beta.2 b954208658

    v4.7.0-beta.2 Stable

    oscbot released this 2026-06-09 00:44:41 +02:00 | 186 commits to beta since this release

    4.7.0-beta.2 (2026-06-08)

    Bug Fixes

    • exclude prerelease tags from the changelog feed (feb2e30)
    Downloads
  • v4.7.0-beta.1 7ac980a153

    v4.7.0-beta.1 Stable

    oscbot released this 2026-06-09 00:41:25 +02:00 | 189 commits to beta since this release

    4.7.0-beta.1 (2026-06-08)

    Features

    • add /api/changelog merging Forgejo release notes (62a1970)
    Downloads