What shipped on OpenVibe.Coupons

Every change deployed to OpenVibe, newest first. Each line is a commit from the OpenVibers repositories, linked to the change itself. When enough have gathered, or a large feature lands, they are written up as Patch notes on openvibe.blog. JSON: /api/v1/changelog.

2026-09-24

9308083The shared update system and one account UI, on the OpenVibe Frame (openvibe-shared 1.11.0, openvibe/frame): the home shows what shipped, /updates is the shared log and the footer links it; the shared navbar handles sign in and out…OpenVibers · 07:55 UTC
da3e594CI calls the shared test workflow (Track Q): OpenVibe.Shared .github/workflows/test.yml@f5e7e73 (install, node --check over server/ and scripts/, npm test, openvibe-contracts-check) instead of a copy of those stepsOpenVibers · 07:55 UTC
ae3a25eopenvibe-publishing v0.2.2 (shares the openvibe-shared v1.5.1 copy instead of installing v1.0.0 alongside)OpenVibers · 02:33 UTC
c47ae98SECURITY.md: how to report a vulnerability ([email protected], 7-day reply, scope, supported versions)OpenVibers · 02:33 UTC
d913e87Public coupon events carry only a short reason code: a staff note or a calling service's free-text reason became the public lifecycle event's reason; anything that is not a code is 'other' (staff notes 'staff'), and report events drop a…OpenVibers · 02:33 UTC

2026-09-23

93f333bopenvibe-shared v1.5.1, openvibe-contracts v0.33.0OpenVibers · 23:17 UTC
a6a86b2openvibe-shared v1.5.0 (Track R release manifest), openvibe-contracts v0.32.0, openvibe-sdk v0.5.0OpenVibers · 22:26 UTC
1c57c47CI: run the shared security workflow (gitleaks secret scan + dependency audit, Track Q)OpenVibers · 19:33 UTC
e48457aDocs: STATUS.json and README match production (2026-09-23)OpenVibers · 18:32 UTC
9b9549enginx: client address headers only from $remote_addr (realip). X-Forwarded-For was appended to and CF-Connecting-IP passed through from the client, so a request reaching the origin without Cloudflare (DNS-only host or the bare IP) chose…OpenVibers · 16:14 UTC
54df411openvibe-publishing v0.2.1 (ReDoS fixes in ssr markdown)OpenVibers · 16:07 UTC
2077793App and module tokens act only for their on_behalf_of person; sandbox tokens refusedOpenVibers · 15:53 UTC
870c389Reports: the submitter of a code (or of evidence for it) cannot report on itOpenVibers · 15:49 UTC
4802a18openvibe-contracts v0.25.0 (coupons manifest and capabilities released); contracts check is blockingOpenVibers · 03:31 UTC
83dd07dOpenVibe.Coupons service (Wave 18): merchants and normalized domains (bundled public-suffix subset, subdomain and path rules), codes with restrictions, honest expiry and evidence, status unknown|repor…OpenVibers · 03:22 UTC

2026-09-21

55da4b6Charter: OpenVibe.Coupons as defined in the OpenVibe realignment plan (placeholder, no code yet)OpenVibers · 16:18 UTC