#
# ChangeLog for / in Klonkt
#
# Generated by Trac 1.6
# 09/09/2026 07:07:03 PM

Wed, 01 Jul 2026 00:57:37 GMT Robin Genis <roboburr@…> [f0807cc]
	* .beads/issues.jsonl (modified)

	chore: close 4fk (per-site pin-resync serialization)
 ...


Wed, 01 Jul 2026 00:57:32 GMT Robin Genis <roboburr@…> [cfe1824]
	* .beads/issues.jsonl (modified)
	* src/services/ActivityPubService.js (modified)

	fix(federation): serialize featured-pin resync per site (4fk)
 ...


Wed, 01 Jul 2026 00:45:57 GMT Robin Genis <roboburr@…> [e1c4f3e]
	* .beads/issues.jsonl (modified)

	chore: close byh (Follow retry-queue delivery)

	Co-Authored-By: ...


Wed, 01 Jul 2026 00:45:51 GMT Robin Genis <roboburr@…> [1b1cc89]
	* .beads/issues.jsonl (modified)
	* CHANGELOG.de.md (modified)
	* CHANGELOG.md (modified)
	* CHANGELOG.nl.md (modified)
	* src/services/ActivityPubService.js (modified)

	fix(federation): deliver Follow via the retry queue (byh)
 ...


Wed, 01 Jul 2026 00:40:09 GMT Robin Genis <roboburr@…> [0f2d441]
	* .beads/issues.jsonl (modified)

	chore: close ymj (Update(Note) handler already shipped in bea59a1)
 ...


Wed, 01 Jul 2026 00:34:47 GMT Robin Genis <roboburr@…> [4e9782c]
	* .beads/issues.jsonl (modified)

	chore: track discovery-hub feature (prutfolio-src-7cz)
 ...


Wed, 01 Jul 2026 00:00:33 GMT Robin Genis <roboburr@…> [2f50c53]
	* src/routes/circle.js (modified)

	fix(cirkel): strip 'RE: <url>' quote prefix from boost card titles
 ...


Tue, 30 Jun 2026 23:54:52 GMT Robin Genis <roboburr@…> [366c13c]
	* src/views/shell.ejs (modified)

	feat(media): suppress right-click menu on covers/images/videos ...


Tue, 30 Jun 2026 23:51:25 GMT Robin Genis <roboburr@…> [b31c119]
	* src/assets/css/style.css (modified)
	* src/views/shell.ejs (modified)

	fix(cirkel): cover videos are decorative — no <video> right-click ...


Tue, 30 Jun 2026 23:46:46 GMT Robin Genis <roboburr@…> [2a58d76]
	* src/views/partials/post-card.ejs (modified)
	* src/views/partials/post-tile.ejs (modified)
	* src/views/shell.ejs (modified)

	fix(cirkel): video covers were blank in the grid view

	The cover ...


Tue, 30 Jun 2026 23:38:24 GMT roboburr <roboburr@…> [38120c7]
	* src/assets/css/style.css (modified)
	* src/views/partials/post-card.ejs (modified)
	* src/views/shell.ejs (modified)

	fix(feed): video covers fill the square thumbnail (object-fit:cover), ...


Tue, 30 Jun 2026 23:14:27 GMT roboburr <roboburr@…> [86fa2d2]
	* src/assets/css/style.css (modified)
	* src/views/partials/post-card.ejs (modified)
	* src/views/shell.ejs (modified)

	fix(feed): video covers keep their aspect ratio (contain + centered) ...


Tue, 30 Jun 2026 23:06:00 GMT roboburr <roboburr@…> [5f3f9ec]
	* src/routes/circle.js (modified)
	* src/views/partials/post-card.ejs (modified)
	* src/views/partials/post-tile.ejs (modified)

	fix(cirkel): render a federated video cover as <video>, not a broken ...


Tue, 30 Jun 2026 22:32:20 GMT roboburr <roboburr@…> [e091add]
	* src/routes/posts.js (modified)

	feat(feed): embed PeerTube videos in the News feed

	A federated ...


Tue, 30 Jun 2026 22:28:13 GMT roboburr <roboburr@…> [f3663e5]
	* README.md (modified)
	* THIRD-PARTY-NOTICES.md (added)

	docs: add THIRD-PARTY-NOTICES.md + README acknowledgements

	Credit ...


Tue, 30 Jun 2026 22:17:48 GMT roboburr <roboburr@…> [d9c5eb8]
	* src/routes/og.js (modified)
	* src/services/OgImageService.js (modified)

	feat(og): light OG card when the site's default theme is Light
 ...


Tue, 30 Jun 2026 22:11:03 GMT roboburr <roboburr@…> [e3a5aed]
	* src/routes/admin-stats.js (modified)
	* src/services/StatsService.js (modified)
	* src/services/i18n.js (modified)
	* src/views/pages/admin-stats.ejs (modified)

	feat(stats): let the admin exclude their own IP from statistics
 ...


Tue, 30 Jun 2026 20:57:01 GMT roboburr <roboburr@…> [65a0697]
	* src/views/pages/post.ejs (modified)
	* src/views/partials/post-card.ejs (modified)

	fix(video-cover): size the swapped <video> like the cover <img> (post ...


Tue, 30 Jun 2026 19:50:05 GMT roboburr <roboburr@…> [f2943c1]
	* src/routes/admin-media.js (modified)
	* src/services/VideoCoverService.js (modified)

	refactor(video-cover, media): stream frames + size cap, drop unused ...


Tue, 30 Jun 2026 19:08:31 GMT roboburr <roboburr@…> [01e3678]
	* CHANGELOG.de.md (modified)
	* CHANGELOG.nl.md (modified)

	docs(changelog): translate the 1.1.0 section to nl + de (and label ...


Tue, 30 Jun 2026 19:04:18 GMT roboburr <roboburr@…> [b1edba0]
	* CHANGELOG.md (modified)
	* package.json (modified)

	release: 1.1.0 — animated video covers, media library, music ...


Tue, 30 Jun 2026 18:57:47 GMT roboburr <roboburr@…> [0fc5db5]
	* src/services/ActivityPubService.js (modified)

	chore(federation): bump SELFHEAL_VERSION to 5 (heal embed-post covers ...


Tue, 30 Jun 2026 18:55:53 GMT roboburr <roboburr@…> [f7ed139]
	* src/services/ActivityPubService.js (modified)

	fix(federation): keep the cover for Klonkt feeds on embed posts ...


Tue, 30 Jun 2026 18:50:59 GMT roboburr <roboburr@…> [2ab99c0]
	* src/views/pages/admin-audio.ejs (modified)
	* src/views/pages/admin-media.ejs (modified)
	* src/views/pages/admin-playlists.ejs (modified)
	* src/views/partials/media-tabs.ejs (added)

	feat(media): shared Media tab bar across Images / Audio / Playlists
 ...


Tue, 30 Jun 2026 18:46:32 GMT roboburr <roboburr@…> [f24b795]
	* src/routes/admin-media.js (added)
	* src/server.js (modified)
	* src/services/i18n.js (modified)
	* src/views/pages/admin-media.ejs (added)
	* src/views/pages/admin.ejs (modified)

	feat(media): Beheer -> Media — image library with usage + cleanup of ...


Tue, 30 Jun 2026 18:22:56 GMT roboburr <roboburr@…> [a95dbfd]
	* src/routes/admin-playlists.js (modified)

	fix(track-picker): allow inserting link-only tracks (Spotify/YouTube, ...


Tue, 30 Jun 2026 18:11:50 GMT roboburr <roboburr@…> [adb6291]
	* src/routes/posts.js (modified)
	* src/routes/tags.js (modified)
	* src/routes/types.js (modified)
	* src/routes/users.js (modified)
	* src/views/pages/post.ejs (modified)
	* src/views/partials/post-card.ejs (modified)
	* src/views/partials/post-tile.ejs (modified)

	feat(video-cover): render iOS video covers across grid, list, related ...


Tue, 30 Jun 2026 18:02:20 GMT roboburr <roboburr@…> [1c33804]
	* src/services/VideoCoverService.js (modified)

	fix(video-cover): double the ANMF frame offset (node-webpmux quirk)
 ...


Tue, 30 Jun 2026 17:56:01 GMT roboburr <roboburr@…> [7ecbefc]
	* src/services/VideoCoverService.js (modified)

	fix(video-cover): composite partial animated-WebP frames (fixes ...


Tue, 30 Jun 2026 17:43:39 GMT roboburr <roboburr@…> [857a06f]
	* src/routes/activitypub.js (modified)
	* src/routes/posts.js (modified)
	* src/services/ActivityPubService.js (modified)
	* src/services/Scheduler.js (modified)

	feat(video-cover): federate an animated cover as a Video attachment ...


Tue, 30 Jun 2026 17:32:33 GMT roboburr <roboburr@…> [b5a09ce2]
	* src/views/pages/post-edit.ejs (modified)
	* src/views/pages/post.ejs (modified)
	* src/views/shell.ejs (modified)

	feat(video-cover): frontend — render animated covers as iOS video, ...


Tue, 30 Jun 2026 17:29:01 GMT roboburr <roboburr@…> [1d6f9a2]
	* src/config/database.js (modified)
	* src/routes/posts.js (modified)

	feat(video-cover): backend — convert animated WebP covers to a muted ...


Tue, 30 Jun 2026 17:23:54 GMT roboburr <roboburr@…> [ecbfa41]
	* package-lock.json (modified)
	* package.json (modified)
	* src/services/VideoCoverService.js (added)

	feat(video-cover): add VideoCoverService + node-webpmux (animated ...


Tue, 30 Jun 2026 16:31:56 GMT roboburr <roboburr@…> [28f797d]
	* src/services/i18n.js (modified)
	* src/views/pages/post.ejs (modified)
	* src/views/shell.ejs (modified)

	feat(post): share button at the bottom of posts

	A "Share/Deel" ...


Tue, 30 Jun 2026 15:26:08 GMT roboburr <roboburr@…> [28bf7f0]
	* src/views/pages/post-edit.ejs (modified)

	fix(editor): animated WebP covers skip the crop editor (were ...


Tue, 30 Jun 2026 15:16:22 GMT roboburr <roboburr@…> [4d1aefb]
	* src/services/ThumbnailService.js (modified)

	fix(thumbnails): serve animated WebP/GIF covers as-is (they were ...


Tue, 30 Jun 2026 15:06:32 GMT roboburr <roboburr@…> [98a1990]
	* src/routes/admin-audio.js (modified)
	* src/views/pages/admin-audio.ejs (modified)
	* src/views/partials/track-editor.ejs (modified)

	feat(admin-audio): replace an existing track's audio file + Playlists ...


Tue, 30 Jun 2026 15:00:39 GMT roboburr <roboburr@…> [d4d8f9d]
	* src/routes/admin-audio.js (modified)

	feat(admin-audio): sort the track list newest-first

	The ...


Tue, 30 Jun 2026 14:50:15 GMT roboburr <roboburr@…> [1a0b007]
	* src/services/ActivityPubService.js (modified)

	feat(federation): link-only tracks federate their external links ...


Tue, 30 Jun 2026 14:37:32 GMT roboburr <roboburr@…> [443f982]
	* src/services/ActivityPubService.js (modified)

	feat(federation): let Mastodon card external embeds — drop image ...


Tue, 30 Jun 2026 14:24:00 GMT roboburr <roboburr@…> [28b59e7]
	* src/services/ActivityPubService.js (modified)

	fix(federation): don't federate inline images we can't serve (stale ...


Tue, 30 Jun 2026 13:58:06 GMT roboburr <roboburr@…> [292734a]
	* src/services/ActivityPubService.js (modified)

	refactor(federation): specific AS2 media types (Image/Audio) for ...


Tue, 30 Jun 2026 13:47:28 GMT roboburr <roboburr@…> [2306abd]
	* src/views/pages/news.ejs (modified)

	fix(news): don't render raw Audio attachments when a Klonkt embed ...


Tue, 30 Jun 2026 13:42:44 GMT roboburr <roboburr@…> [5924bbf]
	* src/services/ActivityPubService.js (modified)

	fix(federation): self-heal also refreshes ap_timeline.url (heals dead ...


Tue, 30 Jun 2026 13:38:13 GMT roboburr <roboburr@…> [d8e3ff7]
	* src/routes/circle.js (modified)
	* src/services/ActivityPubService.js (modified)
	* src/services/i18n.js (modified)
	* src/views/pages/circle-feed.ejs (modified)
	* src/views/pages/following.ejs (modified)

	Revert "feat(circle): filter the Circle feed by member (clickable ...


Tue, 30 Jun 2026 13:38:10 GMT roboburr <roboburr@…> [8b700ad]
	* src/services/ActivityPubService.js (modified)

	fix(federation): refresh ap_timeline.url on inbound Update (remote ...


Tue, 30 Jun 2026 13:31:49 GMT roboburr <roboburr@…> [462a931]
	* src/routes/circle.js (modified)
	* src/services/ActivityPubService.js (modified)
	* src/services/i18n.js (modified)
	* src/views/pages/circle-feed.ejs (modified)
	* src/views/pages/following.ejs (modified)

	feat(circle): filter the Circle feed by member (clickable chips + ...


Tue, 30 Jun 2026 13:24:56 GMT roboburr <roboburr@…> [d5aa7c8]
	* src/services/ActivityPubService.js (modified)

	fix(federation): clear ap_my_reactions when a boosted/liked remote ...


Tue, 30 Jun 2026 13:01:58 GMT roboburr <roboburr@…> [61514f2]
	* src/views/shell.ejs (modified)

	fix(seo): make og:image / twitter:image / JSON-LD image absolute

	A ...


Tue, 30 Jun 2026 05:59:09 GMT roboburr <roboburr@…> [4d63c36]
	* src/services/ActivityPubService.js (modified)

	chore(federation): bump SELFHEAL_VERSION 2->3 for a one-time timeline ...


Tue, 30 Jun 2026 05:57:53 GMT roboburr <roboburr@…> [bea59a1]
	* src/services/ActivityPubService.js (modified)

	feat(federation): keep the Cirkel in sync the AP way — inbound Update ...


Tue, 30 Jun 2026 04:19:12 GMT roboburr <roboburr@…> [69b509d]
	* src/routes/admin-epk.js (modified)
	* src/services/i18n.js (modified)
	* src/views/pages/admin-audio.ejs (modified)
	* src/views/pages/admin-playlists.ejs (modified)
	* src/views/pages/admin-stats.ejs (modified)
	* src/views/pages/admin.ejs (modified)

	fix(i18n): localize the "Beheer" back-buttons + EPK save message ...


Tue, 30 Jun 2026 03:37:41 GMT roboburr <roboburr@…> [757eea0]
	* src/routes/admin-audio.js (modified)
	* src/views/pages/admin-audio.ejs (modified)

	chore(audio): drop the per-track fediverse toggle from Beheer -> ...


Tue, 30 Jun 2026 02:58:45 GMT roboburr <roboburr@…> [432831c]
	* test/activitypub-as2.test.js (added)

	test(federation): AS2/JSON-LD validity guard — every emitted term ...


Tue, 30 Jun 2026 02:38:47 GMT roboburr <roboburr@…> [d3b9f68]
	* src/routes/activitypub.js (modified)
	* src/services/ActivityPubService.js (modified)

	feat(federation): full JSON-LD @context on all AP objects (valid AS2) ...


Tue, 30 Jun 2026 02:27:57 GMT roboburr <roboburr@…> [e0a1ec1]
	* src/routes/posts.js (modified)
	* src/services/i18n.js (modified)
	* src/views/pages/post-edit.ejs (modified)

	feat(editor): per-post "share audio on the fediverse" toggle

	Adds a ...


Tue, 30 Jun 2026 02:10:36 GMT roboburr <roboburr@…> [084d1c0]
	* src/routes/admin-audio.js (modified)
	* src/views/pages/admin-audio.ejs (modified)

	fix(admin-audio): fediverse-share toggle is now AJAX (no page jump)
 ...


Tue, 30 Jun 2026 01:50:00 GMT roboburr <roboburr@…> [f2eacca]
	* src/config/database.js (modified)
	* src/routes/admin-audio.js (modified)
	* src/routes/audio.js (modified)
	* src/services/ActivityPubService.js (modified)
	* src/services/i18n.js (modified)
	* src/views/pages/admin-audio.ejs (modified)

	feat(music): per-track "share on the fediverse" — federate the file ...


Tue, 30 Jun 2026 01:23:32 GMT roboburr <roboburr@…> [80797d7]
	* src/services/ActivityPubService.js (modified)

	feat(federation): add schema.org/PeerTube embedUrl to playable-audio ...


Tue, 30 Jun 2026 00:23:37 GMT roboburr <roboburr@…> [e954722]
	* src/services/i18n.js (modified)
	* src/views/partials/profile-sheet.ejs (modified)

	fix(i18n): localize the mobile profile-sheet menu labels

	The mobile ...


Mon, 29 Jun 2026 23:58:19 GMT roboburr <roboburr@…> [f882048]
	* scripts/install.sh (modified)

	fix(install): a re-run keeps the install's existing channel (no ...


Mon, 29 Jun 2026 23:48:17 GMT roboburr <roboburr@…> [aedc00d]
	* scripts/install.sh (modified)

	fix(install): checkout -f -B <branch> FETCH_HEAD to avoid a divergent ...


Mon, 29 Jun 2026 23:38:17 GMT roboburr <roboburr@…> [1273101]
	* scripts/install.sh (modified)

	fix(install): reset to FETCH_HEAD so updates work across ...


Mon, 29 Jun 2026 23:27:49 GMT roboburr <roboburr@…> [09a2061]
	* scripts/install.sh (modified)

	fix(install): klonkt-update no longer restarts (or claims "updated") ...


Mon, 29 Jun 2026 23:24:30 GMT roboburr <roboburr@…> [328d837]
	* src/routes/posts.js (modified)
	* src/services/MusicMeta.js (added)
	* src/views/shell.ejs (modified)

	feat(music): schema.org MusicRecording/MusicAlbum structured data on ...


Mon, 29 Jun 2026 23:12:32 GMT roboburr <roboburr@…> [93b147d]
	* src/views/partials/post-card.ejs (modified)

	fix(feed): serve full-resolution covers on mobile (responsive srcset) ...


Mon, 29 Jun 2026 23:01:19 GMT roboburr <roboburr@…> [b607d4d]
	* src/assets/css/style.css (modified)
	* src/views/shell.ejs (modified)

	fix(circle): wrap long titles/URLs in no-cover grid tiles instead of ...


Mon, 29 Jun 2026 22:50:52 GMT roboburr <roboburr@…> [054b603]
	* CHANGELOG.md (modified)
	* package.json (modified)

	release: 1.0.0 — first stable release

	Cut the accumulated ...


Mon, 29 Jun 2026 22:36:16 GMT roboburr <roboburr@…> [3f9f71d]
	* src/services/i18n.js (modified)
	* src/views/pages/circle-feed.ejs (modified)

	feat(circle): "+N" members modal when a circle has more than 5 sites
 ...


Mon, 29 Jun 2026 22:19:54 GMT roboburr <roboburr@…> [f2796d3]
	* src/routes/activitypub.js (modified)
	* src/services/ActivityPubService.js (modified)

	fix(federation): AP conformance round — actor enrichment, following ...


Mon, 29 Jun 2026 21:59:19 GMT roboburr <roboburr@…> [fb6819d]
	* src/services/ActivityPubService.js (modified)

	fix(federation): make boosts spec-addressable + durable so receivers ...


Mon, 29 Jun 2026 20:51:05 GMT roboburr <roboburr@…> [7475ff3]
	* src/assets/css/style.css (modified)
	* src/views/shell.ejs (modified)

	style: drop the 0.4px blur on cover thumbnails

	- ...


Sun, 28 Jun 2026 22:42:39 GMT Robin Genis <roboburr@…> [0343a7a]
	* README.md (modified)
	* scripts/install.sh (modified)

	feat(release): self-host updates track a verified 'stable' branch
 ...


Sun, 28 Jun 2026 22:38:19 GMT Robin Genis <roboburr@…> [318e1ce]
	* src/routes/admin-newsletter.js (modified)
	* src/routes/admin-shows.js (modified)
	* src/services/i18n.js (modified)

	fix(i18n): translate the premium-gate 403 messages ...


Sun, 28 Jun 2026 22:27:59 GMT Robin Genis <roboburr@…> [8308c9ca]
	* src/services/ThumbnailService.js (modified)
	* src/views/pages/news.ejs (modified)

	fix(images): full-width timeline media at 1280px (was 640, blurry on ...


Sun, 28 Jun 2026 22:23:01 GMT Robin Genis <roboburr@…> [48027f2]
	* src/views/shell.ejs (modified)

	fix(og): stop double-escaping OG/meta content + keep apostrophes ...


Sun, 28 Jun 2026 22:13:27 GMT Robin Genis <roboburr@…> [3487567]
	* src/middleware/render.js (modified)
	* src/routes/admin-audio.js (modified)
	* src/routes/admin-epk.js (modified)
	* src/routes/admin-newsletter.js (modified)
	* src/routes/admin-playlists.js (modified)
	* src/routes/admin-seo.js (modified)
	* src/routes/admin-settings.js (modified)
	* src/routes/admin-shows.js (modified)
	* src/routes/admin-sites.js (modified)
	* src/routes/admin-stats.js (modified)
	* src/routes/admin-updates.js (modified)
	* src/routes/admin-users.js (modified)
	* src/routes/admin.js (modified)
	* src/services/i18n.js (modified)

	fix(i18n): translate admin page titles (pageTitleKey instead of ...


Sun, 28 Jun 2026 22:08:17 GMT Robin Genis <roboburr@…> [abc8959]
	* src/views/partials/profile-header.ejs (modified)

	fix(images): profile-header avatar 256px (2x of the 120px display, ...


Sun, 28 Jun 2026 21:20:04 GMT Robin Genis <roboburr@…> [5bc67b4]
	* src/services/ThumbnailService.js (modified)
	* src/views/pages/following.ejs (modified)
	* src/views/pages/news.ejs (modified)
	* src/views/partials/fedi-node.ejs (modified)

	fix(images): 96px feed/comment/follow avatars (2x of the 44px ...


Sun, 28 Jun 2026 17:40:58 GMT Robin Genis <roboburr@…> [492fc20]
	* src/services/ThumbnailService.js (modified)
	* src/views/partials/post-card.ejs (modified)

	fix(images): 256px size for list/cirkel covers (match the crisp grid ...


Sun, 28 Jun 2026 17:38:13 GMT Robin Genis <roboburr@…> [041a0df]
	* src/middleware/render.js (modified)
	* src/views/pages/news.ejs (modified)

	fix(images): downscale remote (federated) covers + feed media via the ...


Sun, 28 Jun 2026 17:33:42 GMT Robin Genis <roboburr@…> [3038fc9]
	* src/assets/css/style.css (modified)
	* src/views/shell.ejs (modified)

	fix(images): list-cover placeholder in style.css (inline cascade ...


Sun, 28 Jun 2026 17:29:51 GMT Robin Genis <roboburr@…> [600fbf3]
	* src/views/pages/news.ejs (modified)
	* src/views/shell.ejs (modified)

	feat(images): accent-gradient placeholder also for timeline feed ...


Sun, 28 Jun 2026 17:25:46 GMT Robin Genis <roboburr@…> [a64d705]
	* src/assets/css/style.css (modified)
	* src/views/partials/post-card.ejs (modified)
	* src/views/shell.ejs (modified)

	feat(images): accent-gradient placeholder while covers load + fade-in ...


Sun, 28 Jun 2026 17:15:48 GMT Robin Genis <roboburr@…> [201ec06]
	* src/services/ThumbnailService.js (modified)

	fix(images): cap concurrent ffmpeg (thumbnails) to avoid CPU ...


Sun, 28 Jun 2026 16:57:19 GMT Robin Genis <roboburr@…> [99989f9]
	* src/views/pages/account.ejs (modified)
	* src/views/pages/admin-site-edit.ejs (modified)
	* src/views/pages/admin-users.ejs (modified)
	* src/views/pages/epk.ejs (modified)
	* src/views/pages/user.ejs (modified)
	* src/views/partials/bottom-tab.ejs (modified)
	* src/views/partials/profile-header.ejs (modified)
	* src/views/partials/profile-sheet.ejs (modified)
	* src/views/partials/topnav.ejs (modified)

	feat(images): route all remaining avatars through avatar() ...


Sun, 28 Jun 2026 16:46:38 GMT Robin Genis <roboburr@…> [74c5abc]
	* src/middleware/render.js (modified)
	* src/server.js (modified)
	* src/services/ActivityPubService.js (modified)
	* src/services/ThumbnailService.js (modified)
	* src/views/pages/following.ejs (modified)
	* src/views/pages/news.ejs (modified)
	* src/views/partials/fedi-node.ejs (modified)

	feat(images): downscale remote (fediverse) avatars via a signed proxy ...


Sun, 28 Jun 2026 16:32:37 GMT Robin Genis <roboburr@…> [f79a471]
	* src/middleware/render.js (modified)
	* src/server.js (modified)
	* src/services/ThumbnailService.js (added)
	* src/views/partials/post-card.ejs (modified)
	* src/views/partials/post-tile.ejs (modified)

	feat(images): on-demand lanczos cover thumbnails for crisp grid/list
 ...


Sun, 28 Jun 2026 16:12:48 GMT Robin Genis <roboburr@…> [1ff0043]
	* src/views/pages/admin-seo.ejs (modified)
	* src/views/shell.ejs (modified)

	fix(seo): canonical falls back to PUBLIC_BASE_URL + English ...


Sun, 28 Jun 2026 15:49:07 GMT Robin Genis <roboburr@…> [897c33b]
	* README.md (modified)

	docs(readme): document the HSTS_STRICT env var


Sun, 28 Jun 2026 15:44:15 GMT Robin Genis <roboburr@…> [81bb9c5]
	* .env.example (modified)
	* src/server.js (modified)

	chore(hsts): make includeSubDomains+preload opt-in via HSTS_STRICT
 ...


Sun, 28 Jun 2026 15:36:22 GMT Robin Genis <roboburr@…> [f7d142f]
	* src/server.js (modified)
	* src/views/pages/admin-audio.ejs (modified)
	* src/views/pages/admin-newsletter.ejs (modified)
	* src/views/pages/admin-shows.ejs (modified)
	* src/views/pages/admin-sites.ejs (modified)
	* src/views/pages/admin-updates.ejs (modified)
	* src/views/pages/admin-users.ejs (modified)
	* src/views/pages/authorize-interaction.ejs (modified)
	* src/views/pages/following.ejs (modified)
	* src/views/pages/news.ejs (modified)
	* src/views/pages/post.ejs (modified)
	* src/views/pages/viewer-blocked.ejs (modified)
	* src/views/partials/fedi-node.ejs (modified)
	* src/views/partials/footer.ejs (modified)
	* src/views/partials/playlist-editor.ejs (modified)
	* src/views/shell.ejs (modified)

	chore(csp): drop the last script unsafe-inline + add Permissions- ...


Sun, 28 Jun 2026 15:06:17 GMT Robin Genis <roboburr@…> [127f87e]
	* CHANGELOG.md (modified)

	docs(changelog): note read-more + multi-language hashtags under ...


Sun, 28 Jun 2026 14:40:46 GMT Robin Genis <roboburr@…> [f1627b6]
	* src/services/i18n.js (modified)
	* src/views/pages/news.ejs (modified)

	feat(news): collapse long post bodies with a 'read more' toggle
 ...


Sun, 28 Jun 2026 14:15:48 GMT Robin Genis <roboburr@…> [fe9164f]
	* src/server.js (modified)

	chore(csp): default-src 'none' (deny by default) + explicit manifest- ...


Sun, 28 Jun 2026 14:11:59 GMT Robin Genis <roboburr@…> [a8b4f10]
	* src/server.js (modified)

	chore(headers): Referrer-Policy -> strict-origin-when-cross-origin


Sun, 28 Jun 2026 14:06:48 GMT Robin Genis <roboburr@…> [be5d86c]
	* src/services/ActivityPubService.js (modified)

	feat(i18n): Unicode-aware hashtags + mentions (all scripts, not just ...


Sun, 28 Jun 2026 13:55:31 GMT Robin Genis <roboburr@…> [73abbfd]
	* src/middleware/render.js (modified)
	* src/server.js (modified)

	experiment(csp): strict script-src (nonce + strict-dynamic) — BETA ...


Sun, 28 Jun 2026 13:34:06 GMT Robin Genis <roboburr@…> [9910ba1]
	* src/services/ActivityPubService.js (modified)

	fix(fedi): verify HTTP signatures behind a Host-rewriting proxy
 ...


Sun, 28 Jun 2026 13:15:39 GMT Robin Genis <roboburr@…> [cca2e89]
	* src/middleware/render.js (modified)
	* src/services/i18n.js (modified)
	* src/views/pages/account.ejs (modified)

	feat(identity): one image — the site photo is the only avatar input
 ...