What shipped on OpenVibe.News
Every change deployed to OpenVibe, newest first. Each line is a commit from the OpenVibers repositories, linked to the change itself. When enough have gathered, or a large feature lands, they are written up as Patch notes on openvibe.blog. JSON: /api/v1/changelog.
2026-09-24
b3e752bThe shared update system and one account UI, on the OpenVibe Frame (openvibe-shared 1.11.0, openvibe/frame): the home shows what shipped, /updates is the shared log and the footer links it; the shared navbar handles sign in and out…
a108ad3CI calls the shared test workflow (Track Q): OpenVibe.Shared .github/workflows/test.yml@f5e7e73 (install, node --check over server/ and scripts/, npm test, openvibe-contracts-check) instead of a copy of those steps
42ce43bopenvibe-publishing v0.2.2 (shares the openvibe-shared v1.5.1 copy instead of installing v1.0.0 alongside)
f01c795SECURITY.md: how to report a vulnerability ([email protected], 7-day reply, scope, supported versions)
0143ae8Story flag events use priority low (source-removed stays important): 'normal' is not an envelope priority, so Events refused those flag events
2026-09-23
c2c31b0openvibe-shared v1.5.1, openvibe-contracts v0.33.0
2c4d395openvibe-shared v1.5.0 (Track R release manifest), openvibe-contracts v0.32.0, openvibe-sdk v0.5.0
5b393d2CI: run the shared security workflow (gitleaks secret scan + dependency audit, Track Q)
5a17e7fIndex gate needs two independent sources (NEWS_MIN_INDEPENDENT_SOURCES, default 2)
0d95d9cCommunity comment threads on stories, referenced not copied
d6dae5eDocs: STATUS.json and README match production (2026-09-23)
8650254README: the AI grant namespace is news.* (a bare news matches no news.* workflow)
1802e7dEvents webhook requires signature v2 (replay window); openvibe-sdk v0.4.0
774c024App and module tokens act only for their on_behalf_of person; sandbox tokens refused
dac0424nginx: client address headers only from $remote_addr (realip). X-Forwarded-For was appended to and CF-Connecting-IP passed through from the client, so a request reaching the origin without Cloudflare (DNS-only host or the bare IP) chose…
83018feopenvibe-publishing v0.2.1 (ReDoS fixes in ssr markdown)
7b2a9a3openvibe-contracts v0.21.0 (news manifest and capabilities released); contracts check is blocking
13a1011Tests: the editor desk shows upstream flags, pending revisions and removal reasons; AI drafts are reviewed through the no-JS form
7fd05acREADME (purpose, owns, does not own, depends on, grants, acceptance, launch rule, threat review, deploy), STATUS alpha W17, .env.example, deploy (systemd unit, nginx vhost on 4820), CI on Node 22.22.1 (contracts check continue-on-error…
87a3e0aOpenVibe.News service (Wave 17, News half): Sources items ingested by Events webhook and cursor pull, dedupe (canonical URL, content hash, near-duplicate headlines), deterministic explainable clusters with audited reversible merges and…
2026-09-21
a0b57a6Charter: OpenVibe.News as defined in the OpenVibe realignment plan (placeholder, no code yet)