What shipped on OpenVibe.Deals

Every change deployed to OpenVibe, newest first. Each line is a commit from the OpenVibers repositories, linked to the change itself. When enough have gathered, or a large feature lands, they are written up as Patch notes on openvibe.blog. JSON: /api/v1/changelog.

2026-09-24

c2ad40aThe shared update system and one account UI, on the OpenVibe Frame (openvibe-shared 1.11.0, openvibe/frame): the home shows what shipped, /updates is the shared log and the footer links it; the shared navbar handles sign in and out…OpenVibers · 07:55 UTC

e50a4d0CI calls the shared test workflow (Track Q): OpenVibe.Shared .github/workflows/test.yml@f5e7e73 (install, node --check over server/ and scripts/, npm test, openvibe-contracts-check) instead of a copy of those stepsOpenVibers · 07:55 UTC

3910b58openvibe-publishing v0.2.2 (shares the openvibe-shared v1.5.1 copy instead of installing v1.0.0 alongside)OpenVibers · 02:33 UTC

d12cfbfSECURITY.md: how to report a vulnerability ([email protected], 7-day reply, scope, supported versions)OpenVibers · 02:33 UTC

24d52a2Importer: deals.offer.updated names every field an observation moved (expires_at, product_id, title, status), not just 'observation', so consumers never miss a changed fieldOpenVibers · 02:33 UTC

2026-09-23

f453cb5openvibe-shared v1.5.1, openvibe-contracts v0.33.0OpenVibers · 23:15 UTC

603ff5bopenvibe-shared v1.5.0 (Track R release manifest), openvibe-contracts v0.32.0, openvibe-sdk v0.5.0OpenVibers · 22:26 UTC

91ca223CI: run the shared security workflow (gitleaks secret scan + dependency audit, Track Q)OpenVibers · 19:33 UTC

e7b8da0Docs: STATUS.json and README match production (2026-09-23)OpenVibers · 18:32 UTC

e72aeecEvents webhook requires signature v2 (replay window); openvibe-sdk v0.4.0OpenVibers · 17:01 UTC

ac82f60nginx: client address headers only from $remote_addr (realip). X-Forwarded-For was appended to and CF-Connecting-IP passed through from the client, so a request reaching the origin without Cloudflare (DNS-only host or the bare IP) chose…OpenVibers · 16:14 UTC

c1b58e6openvibe-publishing v0.2.1 (ReDoS fixes in ssr markdown)OpenVibers · 16:07 UTC

3f5fa5bApp and module tokens act only for their on_behalf_of person; sandbox tokens refusedOpenVibers · 15:53 UTC

2297851API: a moderator-removed deal answers 410 like its page instead of serving its title, description and link; moderators still read itOpenVibers · 15:48 UTC

dd08793openvibe-contracts v0.23.0 (deals manifest and capabilities released); contracts check is blockingOpenVibers · 03:27 UTC

94f99e9README (purpose, owns, does not own, depends on, grants, acceptance, launch rule, threat review, deploy), STATUS alpha W18, .env.example, deploy (systemd unit, nginx vhost on 4840), CI on Node 22.22.1 (contracts check continue-on-error…OpenVibers · 03:26 UTC

040cca5OpenVibe.Deals service (Wave 18, Deals): the nine deal_* tables in its own SQLite; community submissions and Sources imports as offers whose every price, shipping, condition and availability is a timestamped observation with its source…OpenVibers · 03:26 UTC

2026-09-21

f58795dCharter: OpenVibe.Deals as defined in the OpenVibe realignment plan (placeholder, no code yet)OpenVibers · 16:18 UTC