• slugkit-release-2026-11-04-signed-follow-resolution 2a883b590e

    erik released this 2026-11-04 12:26:22 -06:00 | -1 commits to main since this release

    Signed Follow target resolution

    • Template ZIP 1.0.1 signs actor retrieval with the configured actor's existing keys, allowing Follow targets that reject unsigned GETs to resolve while preserving fetch safeguards. New sites receive the corrected initialization ZIP; existing customized sites must review and port the resolver, API and key wiring, not just update a dependency.
    • Repository development CLI configuration now respects the app port set in .env. No npm/CLI release, key rotation or website deployment is needed; template 1.0.1 retains the contract 3.0.0 client-readiness gate from template 1.0.0.

    Changelog

    Changes

    Template artifact 1.0.1

    Downloads
  • slugkit-template-v1.0.1 2a883b590e

    erik released this 2026-11-04 12:26:15 -06:00 | -1 commits to main since this release

    Signed Follow target resolution

    • Template ZIP 1.0.1 signs actor retrieval with the configured actor's existing keys, allowing Follow targets that reject unsigned GETs to resolve while preserving fetch safeguards. New sites receive the corrected initialization ZIP; existing customized sites must review and port the resolver, API and key wiring, not just update a dependency.
    • Repository development CLI configuration now respects the app port set in .env. No npm/CLI release, key rotation or website deployment is needed; template 1.0.1 retains the contract 3.0.0 client-readiness gate from template 1.0.0.

    Changelog

    Changes

    Template artifact 1.0.1

    Downloads
  • slugkit-release-2026-10-30-consumed-incoming-retention 3d5ff421cd

    erik released this 2026-10-30 22:30:58 -05:00 | 1 commits to main since this release

    Client-owned incoming delivery history

    • Breaking: @evcraddock/slug-api 2.0.0 carries contract 3.0.0: explicit incoming-copy removal now purges delivery/deduplication metadata as well as bodies, so consumed remote activities may return as fresh copies. Update with npm install --save-exact @evcraddock/slug-api@2.0.0 only with reviewed site-code and client adoption; clients must own long-term recognition and repeat cleanup.
    • Template ZIP 1.0.0 includes the new removal behavior and guarded, operator-only legacy cleanup; existing customized sites need site-code changes, not just a package update. Do not deploy the retention change or purge legacy tombstones until Rott redelivery handling is verified using the rollout gate and cleanup guide; no CLI update, website deployment or data repair is performed by this release.

    Changelog

    Changes

    @evcraddock/slug-api@2.0.0

    Template artifact 1.0.0

    Downloads
  • slugkit-template-v1.0.0 3d5ff421cd

    erik released this 2026-10-30 22:24:25 -05:00 | 1 commits to main since this release

    Client-owned incoming delivery history

    • Breaking: @evcraddock/slug-api 2.0.0 carries contract 3.0.0: explicit incoming-copy removal now purges delivery/deduplication metadata as well as bodies, so consumed remote activities may return as fresh copies. Update with npm install --save-exact @evcraddock/slug-api@2.0.0 only with reviewed site-code and client adoption; clients must own long-term recognition and repeat cleanup.
    • Template ZIP 1.0.0 includes the new removal behavior and guarded, operator-only legacy cleanup; existing customized sites need site-code changes, not just a package update. Do not deploy the retention change or purge legacy tombstones until Rott redelivery handling is verified using the rollout gate and cleanup guide; no CLI update, website deployment or data repair is performed by this release.

    Changelog

    Changes

    @evcraddock/slug-api@2.0.0

    Template artifact 1.0.0

    Downloads
  • slugkit-release-2026-10-30-follow-account-fixes 47e382cfc1

    erik released this 2026-10-30 20:42:24 -05:00 | 3 commits to main since this release

    Safer follow and contact identity

    • @evcraddock/slug-api 1.1.0 carries compatible contract 2.3.0, allowing deletion of contacts with only inactive follow history while preserving incoming content. Update with npm install --save-exact @evcraddock/slug-api@1.1.0; existing sites must also adopt the site-code changes and migration 031, not just upgrade the package.
    • Template ZIP 0.12.2 reuses existing contact-owned accounts when verified public-profile and canonical actor URLs identify the same ActivityPub actor, rather than creating duplicates. Existing customized sites must adapt the follow-resolution fix and guarded duplicate-repair guidance; no CLI update is needed, and this release does not deploy websites or repair their data.

    Changelog

    Changes

    @evcraddock/slug-api@1.1.0

    Template artifact 0.12.2

    Downloads
  • slugkit-template-v0.12.2 47e382cfc1

    erik released this 2026-10-30 20:42:19 -05:00 | 3 commits to main since this release

    Safer follow and contact identity

    • @evcraddock/slug-api 1.1.0 carries compatible contract 2.3.0, allowing deletion of contacts with only inactive follow history while preserving incoming content. Update with npm install --save-exact @evcraddock/slug-api@1.1.0; existing sites must also adopt the site-code changes and migration 031, not just upgrade the package.
    • Template ZIP 0.12.2 reuses existing contact-owned accounts when verified public-profile and canonical actor URLs identify the same ActivityPub actor, rather than creating duplicates. Existing customized sites must adapt the follow-resolution fix and guarded duplicate-repair guidance; no CLI update is needed, and this release does not deploy websites or repair their data.

    Changelog

    Changes

    @evcraddock/slug-api@1.1.0

    Template artifact 0.12.2

    Downloads
  • slugkit-release-2026-10-29-federated-markdown 9781aff035

    erik released this 2026-10-29 17:07:44 -05:00 | 8 commits to main since this release

    Readable Markdown in federated posts

    • Template ZIP 0.12.1 renders Markdown in notes and link commentary as safe HTML for ActivityPub followers, rather than showing formatting syntax. Existing sites must adopt the server-side rendering changes; no CLI update or database migration is needed, and this release does not deploy websites or refresh existing notes.

    Changelog

    Changes

    Template artifact 0.12.1

    Downloads
  • slugkit-template-v0.12.1 9781aff035

    erik released this 2026-10-29 17:04:10 -05:00 | 8 commits to main since this release

    Readable Markdown in federated posts

    • Template ZIP 0.12.1 renders Markdown in notes and link commentary as safe HTML for ActivityPub followers, rather than showing formatting syntax. Existing sites must adopt the server-side rendering changes; no CLI update or database migration is needed, and this release does not deploy websites or refresh existing notes.

    Changelog

    Changes

    Template artifact 0.12.1

    Downloads
  • slugkit-release-2026-10-27-incoming-activity 79e8f03fde

    erik released this 2026-10-27 16:02:15 -05:00 | 11 commits to main since this release

    Download followed-account posts and boosts

    • Breaking API upgrade from contract 1.1.0: @evcraddock/slug-api 1.0.0 carries contract 2.2.0, replacing following-response contactId with accountId. Update with npm install --save-exact @evcraddock/slug-api@1.0.0, adapt clients to resolve the Account's contact owner, and review the following migration requirements.
    • Authenticated clients can download posts and boosts from one followed account and independently remove explicit buffered copies; downloading never deletes or marks read. Existing websites must adopt the site-owned routes, inbox/buffer changes and migrations 027–030—a package update alone is insufficient; back up, test a restored copy and authorize migration/deployment separately using the adoption guide.
    • @evcraddock/slug-federation 0.1.1 fixes private-address validation, including bracketed/private IPv6 literals. Update with npm install --save-exact @evcraddock/slug-federation@0.1.1; the contract and client guidance covers boost attribution, retry-safe removal, pagination and retained deduplication metadata without automatic expiry.
    • Template ZIP 0.12.0 includes these changes and the already-released auth 1.0.0 dependency for new slug init sites. Existing customized sites must adapt the documented changes rather than overwrite their files; existing Slug CLI commands need no CLI update, and public contract references do not mean a deployed website has adopted the new API.

    Changelog

    Changes

    @evcraddock/slug-api@1.0.0

    @evcraddock/slug-federation@0.1.1

    Template artifact 0.12.0

    Downloads
  • slugkit-template-v0.12.0 79e8f03fde

    erik released this 2026-10-27 16:02:09 -05:00 | 11 commits to main since this release

    Download followed-account posts and boosts

    • Breaking API upgrade from contract 1.1.0: @evcraddock/slug-api 1.0.0 carries contract 2.2.0, replacing following-response contactId with accountId. Update with npm install --save-exact @evcraddock/slug-api@1.0.0, adapt clients to resolve the Account's contact owner, and review the following migration requirements.
    • Authenticated clients can download posts and boosts from one followed account and independently remove explicit buffered copies; downloading never deletes or marks read. Existing websites must adopt the site-owned routes, inbox/buffer changes and migrations 027–030—a package update alone is insufficient; back up, test a restored copy and authorize migration/deployment separately using the adoption guide.
    • @evcraddock/slug-federation 0.1.1 fixes private-address validation, including bracketed/private IPv6 literals. Update with npm install --save-exact @evcraddock/slug-federation@0.1.1; the contract and client guidance covers boost attribution, retry-safe removal, pagination and retained deduplication metadata without automatic expiry.
    • Template ZIP 0.12.0 includes these changes and the already-released auth 1.0.0 dependency for new slug init sites. Existing customized sites must adapt the documented changes rather than overwrite their files; existing Slug CLI commands need no CLI update, and public contract references do not mean a deployed website has adopted the new API.

    Changelog

    Changes

    @evcraddock/slug-api@1.0.0

    @evcraddock/slug-federation@0.1.1

    Template artifact 0.12.0

    Downloads