What shipped on OpenVibe.Search

Every change deployed to OpenVibe, newest first. Each line is a commit from the OpenVibers repositories, linked to the change itself. When enough have gathered, or a large feature lands, they are written up as Patch notes on openvibe.blog. JSON: /api/v1/changelog.

2026-09-24

bd9faf8One W3C trace across services (Track O): openvibe-shared v1.7.0 trace.install(app) keeps each request's traceparent and puts it on the calls made while serving it, to loopback and OpenVibe hosts onlyOpenVibers · 06:16 UTC

2586e9eCI calls the shared test workflow (Track Q): OpenVibe.Shared .github/workflows/test.yml@f5e7e73 (install, node --check over server/ and scripts/, npm test, openvibe-contracts-check) instead of a copy of those stepsOpenVibers · 06:16 UTC

4603541SECURITY.md: how to report a vulnerability ([email protected], 7-day reply, scope, supported versions)OpenVibers · 06:16 UTC

2026-09-23

57155cbopenvibe-shared v1.5.1, openvibe-contracts v0.33.0OpenVibers · 23:15 UTC

5a4b08bopenvibe-shared v1.5.0 (Track R release manifest), openvibe-contracts v0.32.0OpenVibers · 22:19 UTC

a707e38Test: the search.openvibe.network vhost keeps the wildcard certificate, $remote_addr client headers, /metrics 404, loopback-only owner API, webhook and document writes, and a JSON 404 for unknown pathsOpenVibers · 19:57 UTC

dd7bcabW14: removal purge queue, freshness ranking, saved searches, a search page and the public vhostOpenVibers · 19:53 UTC

9d8a4ebCI: run the shared security workflow (gitleaks secret scan + dependency audit, Track Q)OpenVibers · 19:33 UTC

1be4b40Track O: /metrics for direct loopback callers and a truthful /api/ready (openvibe-shared v1.3.0)OpenVibers · 18:58 UTC

cd8e1eaDocs: STATUS.json and README match production (2026-09-23)OpenVibers · 18:34 UTC

5a7e59bEvents webhook requires signature v2 (replay window)OpenVibers · 17:00 UTC

43ae2a8nginx: client address headers only from $remote_addr (realip). X-Forwarded-For was appended to and CF-Connecting-IP passed through from the client, so a request reaching the origin without Cloudflare (DNS-only host or the bare IP) chose…OpenVibers · 16:14 UTC

12b4046openvibe-contracts v0.13.0 (manifest, capabilities and schemas released in v0.12.0); contracts check in CIOpenVibers · 02:07 UTC

f4fd8d6Test: OpenVibe.Sources item documents (staff-only, noindex) index through the Events path and are visible to role:admin onlyOpenVibers · 01:53 UTC

a9d4843Search service: index documents with revision ordering and tombstones, event inbox, permission-aware FTS5 query API, removal events through an outboxOpenVibers · 01:32 UTC

244d812Contracts proposal (search.index-document@1), capability and service manifest proposals, engine ADR, README, STATUS alpha W14, env example, systemd unit, nginx vhost, CI on Node 22.22.1OpenVibers · 01:32 UTC