Last Notes
[ besoeasy/gupt ] chore: bump version to 4.1.15
https://github.com/besoeasy/gupt/commit/1ac883c6cf3230f3ca365082e08fba51a6abd58d
[ loblawbob873-svg/posterchanai ] Refresh clients for faithful remote desktop audio
https://github.com/loblawbob873-svg/posterchanai/commit/01812acd509db0522fda6044c889dff218f5c6a3
[ coracle-social/flotilla ] Bump version
https://github.com/coracle-social/flotilla/commit/d95ea3c905bd2562622d085d8e9279ff9a90138d
[ davotoula/brollyzapper ] Merge pull request #74 from davotoula/as0.11-tristate-verdict
as0.11: preflight carries a three-state verdict, so 'not checked' stops rendering as FAIL and reaching the banner
https://github.com/davotoula/brollyzapper/commit/fcdde7291d5a9c27fca5f0fc47c8aecbfc6b0168
[ estebanrfp/gdb ] release: sync public bundle from GenosDB@baa2132
https://github.com/estebanrfp/gdb/commit/149da2bd5493e241d25cb82579c35efa94138686
[ forgesworn/wildbloom-node ] feat: maintain a policy directory and enrol from a source inventory (#22)
* feat: maintain configured replicas with external signing
* feat: maintain a policy directory and enrol from a source inventory
Add `wildbloomd replicas run --policy-dir --state-root`: one process
maintains every signed policy in a directory, with per-policy state and
locks, per-prefix intervals, stop-until-changed handling, and per-policy
failure backoff instead of exiting.
https://github.com/forgesworn/wildbloom-node/commit/759127e75b1793f43a96390bca00a73cbac3ac15
[ oth-body/hoot ] feat(nip46): show user's kind-0 profile (name, about, NIP-05) after Amber login (#79)
* feat(nip46): add Session.FetchProfile to fetch kind-0 metadata over live relays
The user's bug report: 'it doesn't give a success message on the actual
device, it needs to give a success message there and also show the
profile of the person when it's working in HOOT.'
Right now the TUI shows nothing more than the 16-char pubkey prefix
after QR login — no name, no about, no picture, no NIP-05. There's
https://github.com/oth-body/hoot/commit/de32c6aab56d9f4ffb227a9d917aa339779083a5
[ estebanrfp/gdb ] release: sync public bundle from GenosDB@e71bedc
https://github.com/estebanrfp/gdb/commit/43e69c7ba16a0c5d0e90c05ee7ee34e023873580
[ bitkarrot/nostr-cms ] Merge pull request #83 from bitkarrot/fix/js-yaml-cve-2026-84375
fix(deps): bump js-yaml to 4.3.2 / 3.15.2 (GHSA-2883-xcg3-v3hh)
https://github.com/bitkarrot/nostr-cms/commit/20d2eeabfea3db5f10d6c19b0b0dcf9e2bd6571f
[ loblawbob873-svg/posterchanai ] fix
https://github.com/loblawbob873-svg/posterchanai/commit/570c7bf1f8eedc96ecf187f8e98c9b1adff17f60
[ 398ja/cashu-voucher ] chore(deps): adopt imani-bom 0.1.80 (#42)
Picks up wallet-lib 0.2.1 (proof secrets were double-encrypted and
unspendable), imani-security 0.2.1, imani-merchant 0.2.0 and
cashu-mint 0.36.4.
mvn -B -ntp verify: BUILD SUCCESS, 427 tests, 0 failures.
Co-authored-by: tcheeric <erict875@tuta.io>
https://github.com/398ja/cashu-voucher/commit/5587b252b4c1f41131c4c5fe0c26dd08bd5ac9ee
[ AstrolexisAI/pyblock-blake2b ] Chat header in two rows — Android
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EZR71ANMrKwM9F9hjWfs4v
https://github.com/AstrolexisAI/pyblock-blake2b/commit/d1dee3aea1000d24b151dbbef0ba6944f6e11550
[ tcheeric/nap-java ] chore(deps): adopt imani-bom 0.1.80 (#25)
Picks up wallet-lib 0.2.1 (proof secrets were double-encrypted and
unspendable), imani-security 0.2.1, imani-merchant 0.2.0 and
cashu-mint 0.36.4.
mvn -B -ntp verify: BUILD SUCCESS, 185 tests, 0 failures.
Co-authored-by: tcheeric <erict875@tuta.io>
https://github.com/tcheeric/nap-java/commit/1f55c9a0fce78e3278db53d078b88cc8a31c364b
[ naturallaw777/Sovran_SystemsOS ] chore(release): prepare v1.1.6
https://github.com/naturallaw777/Sovran_SystemsOS/commit/74405b2ffca87ff7142499295e1bf618ff997819
[ vitorpamplona/amethyst ] Merge pull request #4128 from davotoula/fix/nwc-quota-exceeded-render
test(nwc): pin refusal rendering and the in-flight REQ filter hold
https://github.com/vitorpamplona/amethyst/commit/5dce8d59538e42b886e11995aeab7e7285de060e
[ Routstr/routstr-core ] Merge pull request #719 from Routstr/add-model-path-metadata
add model path metadata
https://github.com/Routstr/routstr-core/commit/2478a50c2541ce7bbb94ca29945655bc0ca9fb12
[ loblawbob873-svg/posterchanai ] fix
https://github.com/loblawbob873-svg/posterchanai/commit/0afd0114472dd746888ac4a5fa48c9aa2347c631
[ davotoula/brollyzapper ] Merge pull request #73 from davotoula/0vk.22-github-presence
0vk.22: the README mark, the OpenSSF Scorecard badge, and the 1280×640 social preview from the same generator
https://github.com/davotoula/brollyzapper/commit/317a011cbde14ddc0444ff70f6f4be9bc91902bb
[ naturallaw777/Sovran_SystemsOS ] updated nix packages includes the new mempool version
https://github.com/naturallaw777/Sovran_SystemsOS/commit/258da6a337d1f3d960628134f7f15fb0ca904065
そんなことより、これ知っとったか？
#nevent1q…x9pr
[ arbadacarbaYK/gittr ] Turn GitHub :emoji: shortcodes into real emoji in markdown preview.
https://github.com/arbadacarbaYK/gittr/commit/03f94b6732054d71e5e47de41048a156d6c069b8
[ ContextVM/sdk ] test(core): cover LruCache's behavior (#90)
https://github.com/ContextVM/sdk/commit/5cae597c8dac4ea761c6f19e3e697ba491a8a036
[ bryanmatthewsimonson/xray ] docs(review): the designer reviews the governance corpus (#364)
* docs(skill): ground ux-designer reviews in the governance corpus
Maintainer directive 2026-08-28: the designer must look at the
constitution and all governance docs. The skill gains an eight-item
governance checklist run on every review, each item a design-specific
derivation with its exact citation (CONSTITUTION Arts. 3, 4.4-4.6,
5.2, 5.4, 6, 7, 8, 12; TS H-5/H-7/S-4/S-6), a matching first
principle (honest limits are design material), a governance class
https://github.com/bryanmatthewsimonson/xray/commit/07b91c59b7f6af5b8ffc2de84229a98248791ad8
[ loblawbob873-svg/posterchanai ] Keep expanded release checks within a bounded CI budget
https://github.com/loblawbob873-svg/posterchanai/commit/65b09fd7eb15ae7b31c5387128df2cdb178c28c2
[ steve02081504/fount ] security: fix login redirect sanitization for CodeQL (#338)
* security: keep login redirect on same origin as path concat
* fix: avoid double-decoding login redirect param
https://github.com/steve02081504/fount/commit/95bc0721a73ac0b036920be011c82e6b86881fb7
[ FelineStateMachine/tinyrelay ] fix(tinyagent): task lifecycle, admission receipts and profile scope
Each task request runs in its own session so Hermes cannot merge two
requests into one turn, and a request Hermes still merges ends with an
error naming the carrier. The session is assigned before subscribing so
events delivered ahead of the acknowledgment cannot reach a missing
helper. A file-only task whose deliveries the adapter observed publishes
a result even when Hermes core grades the turn as failed. Events are
marked seen only after Hermes issues an admission receipt, terminal
cards are retried, the private key and settings resolve through the
https://github.com/FelineStateMachine/tinyrelay/commit/46d32538d616d6bc85850f22eb02a8e1ad9032ee
[ elisymlabs/elisym ] Merge pull request #93 from elisymlabs/app-delegated-chat-gate
app: Never pay a delegation capability per job
https://github.com/elisymlabs/elisym/commit/95564bfe0f420026c5ba530ee08de4d7588b643e
[ steve02081504/fount ] security: clean up code-scanning alerts (#337)
* security: address code-scanning alerts
- Replace Math.random with crypto in service generators / session / svg inliner / userscript
- Escape toast text and notification i18n attrs; keep sanctioned HTML toast channel
- Validate redirect/hostnames (login, tutorial, deskpet, char-download, badges)
- Clamp backend-driven toast duration; secure cookie on https
- Restrict workflow token permissions; harden regexp escapes
- Add toast frontend regression tests (plain text escaped, custom HTML kept)
https://github.com/steve02081504/fount/commit/045f7ed822b2753e8882296a14028c5d6f363e32
[ FelineStateMachine/tinyrelay ] feat(tinyagent): durable task cards and handoff threads for Hermes
A kind 43001 request addressed to the agent becomes a Hermes turn in a
thread anchored at the request. The adapter publishes one accepted
event when processing starts, throttled progress while the turn runs,
and exactly one result or error when it ends, skipping requests that
already carry a terminal answer. A kind 43005 from the requester, or a
!cancel mention in Buzz's convention, stops the turn. Handoffs open a
kind 11 thread so a handed-off session continues in its own thread.
https://github.com/FelineStateMachine/tinyrelay/commit/4c4f3249a74b6ad0148005dcd96d5f8287e4406e
[ oth-body/hoot ] Merge pull request #73 from oth-body/fix/nip46-signin-proxy
Fixes the "Amber sign-in failed to connect to port 9050" bug. Refuses to dial relays when any *_PROXY env var is set (e.g. inherited from torsocks, a launcher, or a shell that exports Tor config for monerod/curl). Also validates relay URLs up front so misconfigured relays.txt surfaces a clear error.
https://github.com/oth-body/hoot/commit/f88b500bf0c8e240d2227cca561e2fb828e6cd11
[ ZeusLN/zeus ] Merge pull request #4661 from kaloudis/fix/hide-ldk-fee-rate-fields
Hide on-chain fee rate fields on backends that don't apply them
https://github.com/ZeusLN/zeus/commit/a535d08c35927b67c20778fbcbcee914f3a339f7
