0.4.19

What's Changed

• [codex] restore shared session access by @joryirving in #620
• chore(release): bump version to 0.4.19 by @its-saffron[bot] in #621

Full Changelog: 0.4.18...0.4.19

0.4.18

What's Changed

• [codex] restore frontend startup by @joryirving in #618
• chore(release): bump version to 0.4.18 by @its-saffron[bot] in #619

Full Changelog: 0.4.17...0.4.18

0.4.17

What's Changed

• fix: render-utils.js module not defined + Rocket Loader script conflict by @itsmiso-ai in #616
• chore(release): bump version to 0.4.17 by @its-saffron[bot] in #617

Full Changelog: 0.4.16...0.4.17

0.4.16

What's Changed

• fix(release): support publish recovery by @joryirving in #608
• fix(release): recognize app PR authors by @joryirving in #609
• fix(release): detect missing tags by @joryirving in #610
• fix(release): avoid tag visibility race by @joryirving in #611
• chore(deps): lock file maintenance by @its-miso[bot] in #612
• fix: service worker serving stale HTML with old CSP headers by @itsmiso-ai in #614
• fix(ci): correct invalid action SHAs in android-release workflow by @itsmiso-ai in #613
• chore(release): bump version to 0.4.16 by @its-saffron[bot] in #615

Full Changelog: 0.4.15...0.4.16

0.4.15

What's Changed

• fix(ci): route manual-release through PR + auto-merge by @itsmiso-ai in #595
• ci(github-action)!: Update action actions/checkout to v7.0.0 by @its-miso[bot] in #596
• feat(deps): update gradle (9.5.1 → 9.6.0) by @its-miso[bot] in #598
• fix(deps): update dependency @capgo/capacitor-updater (8.49.4 → 8.49.7) by @its-miso[bot] in #599
• ci(github-action)!: Update action actions/checkout (v6 → v7) by @its-miso[bot] in #597
• fix(deps): update capacitor monorepo (8.4.0 → 8.4.1) by @its-miso[bot] in #600
• ci(github-action)!: Update action misospace/pr-reviewer-action (v1.3.0 → v2.0.1) by @its-miso[bot] in #601
• fix: remove CSP nonce that blocks inline scripts by @itsmiso-ai in #604
• fix: commit missing JS files that were in Docker image but not git by @itsmiso-ai in #605
• fix(release): automate protected releases by @joryirving in #606
• chore(release): bump version to 0.4.15 by @its-saffron[bot] in #607

New Contributors

• @its-saffron[bot] made their first contribution in #607

Full Changelog: 0.4.14...0.4.15

0.4.14

What's Changed

• fix(deps): update dependency @capgo/capacitor-updater (8.47.6 → 8.47.9) by @its-miso[bot] in #547
• fix(ci): stop blocking PRs with tool harness enforcement by @joryirving in #549
• feat: harden mobile OTA manifest trust with validation (#535) by @itsmiso-ai in #550
• docs: tune AI PR review guidance by @itsmiso-ai in #553
• fix: export isNativeCapacitor() from shared capacitor-detect module by @itsmiso-ai in #552
• feat(deps): update dependency @capgo/capacitor-updater (8.47.9 → 8.48.0) by @its-miso[bot] in #551
• ci: update pr-reviewer-action from v1.0.18 to v1.1.1 by @itsmiso-ai in #554
• chore(android-release): replace debug APK with production-grade signed release artifacts by @itsmiso-ai in #557
• chore(deps): lock file maintenance by @its-miso[bot] in #555
• feat(deps): update dependency @capgo/capacitor-updater (8.48.0 → 8.49.0) by @its-miso[bot] in #556
• feat: add session/operation authorization boundary by @itsmiso-ai in #558
• feat: add route-level CSRF tokens for browser session commands (#537) by @itsmiso-ai in #559
• fix(deps): update dependency @capgo/capacitor-updater (8.49.0 → 8.49.1) by @its-miso[bot] in #560
• fix: consolidate update manager, remove stale APK logic by @itsmiso-ai in #564
• ci: upgrade pr-reviewer-action to v1.2.0 (routing + escalation) by @joryirving in #572
• feat: add SESSION_COOKIE_DOMAIN env var for subdomain isolation by @itsmiso-ai in #562
• ci: use BOT_CLIENT_ID secret for the app token by @joryirving in #573
• chore: remove duplicate PR workflow by @joryirving in #574
• fix: repair release/docs drift (#545) by @itsmiso-ai in #568
• ci: upgrade pr-reviewer-action to v1.2.3 (tool loop, carry-forward verdicts) by @joryirving in #575
• docs: document mobileAuthHandoffs cleanup window behavior (#530) by @itsmiso-ai in #561
• ci: bump tool_planning_max_tokens 300 → 1500 by @joryirving in #576
• fix(ci): replace empty test-results.json with real TAP reporter output by @itsmiso-ai in #577
• test: add authorization/integration test matrix for audit #539 by @itsmiso-ai in #578
• ci(pr-review): enable ci_status_check to feed CI results into review by @joryirving in #579
• docs: repair release/docs drift — add v0.4.0–v0.4.13 changelog, update OTA docs by @itsmiso-ai in #567
• refactor: extract auth/session boundary into lib/auth-session.js by @itsmiso-ai in #570
• feat(pr-review): /ai-review comment command to force a re-review by @joryirving in #580
• ci: label-driven AI re-review (v1.2.9) by @joryirving in #581
• fix: make lint actually run ESLint on server.js, lib/, and tests/ by @itsmiso-ai in #571
• chore(deps): lock file maintenance by @its-miso[bot] in #582
• fix(ci): stop label events from cancelling net-new PR reviews by @joryirving in #583
• fix(deps): update dependency better-sqlite3 (12.10.0 → 12.10.1) by @its-miso[bot] in #584
• ci(github-action): update action misospace/pr-reviewer-action (v1.2.9 → v1.2.11) by @its-miso[bot] in #585
• chore: manage Dispatch labels from labels.yaml by @joryirving in #586
• chore(ai-review): adopt pr-reviewer v1.3.0 native_loop + org-var tokens by @joryirving in #587
• feat(deps): update dependency multer (2.1.1 → 2.2.0) by @its-miso[bot] in #588
• feat(deps): update dependency better-sqlite3 (12.10.1 → 12.11.1) by @its-miso[bot] in #589
• Harden container runtime defaults by @itsmiso-ai in #590
• fix(deps): update dependency @capgo/capacitor-updater (8.49.1 → 8.49.3) by @its-miso[bot] in #591
• feat(deps): update dependency com.google.gms:google-services (4.4.4 → 4.5.0) by @its-miso[bot] in #592
• fix(deps): update dependency @capgo/capacitor-updater (8.49.3 → 8.49.4) by @its-miso[bot] in #593
• chore: release v0.4.14 by @itsmiso-ai in #594

Full Changelog: 0.4.13...0.4.14

v0.4.13

v0.4.13

Changes

• Added release runbook to AGENTS.md
• Updated @capgo/capacitor-updater 8.47.5 → 8.47.6
• Updated actions/checkout CI action v6.0.2 → v6.0.3

Validation

• Lint: node --check server.js ✅
• Tests: 174/174 passing ✅
• Audit: 0 vulnerabilities ✅

0.4.12

What's Changed

• feat(deps): update gradle (9.4.1 → 9.5.0) by @miso-assistant[bot] in #453
• fix(deps): update dependency @capgo/capacitor-updater (8.45.9 → 8.45.10) by @miso-assistant[bot] in #452
• fix readme by @joryirving in #454
• fix(ws): infer GATEWAY_WS_ORIGIN from CORS_ORIGIN if not set by @itsmiso-ai in #455

Full Changelog: 0.4.11...0.4.12

0.4.11

What's Changed

• fix(ci): add workflow_dispatch to wishlist-pr-review by @itsmiso-ai in #410
• Revert "fix(ci): add workflow_dispatch to wishlist-pr-review" by @joryirving in #416
• feat(chat): render YouTube embeds inline by @itsmiso-ai in #414
• fix(deps): update dependency dotenv (17.4.0 → 17.4.1) by @smurf-bot[bot] in #415
• feat: add issue templates by @itsmiso-ai in #417
• feat: add GPL-3.0 license by @itsmiso-ai in #418
• fix(readme): update docker badge to ghcr by @itsmiso-ai in #419
• ci(github-action)!: Update action actions/checkout (v4 → v6) by @smurf-bot[bot] in #421
• ci(github-action): pin action actions/create-github-app-token to f8d387b by @smurf-bot[bot] in #420
• fix(deps): update dependency @capgo/capacitor-updater (8.45.1 → 8.45.3) by @smurf-bot[bot] in #422
• ci(github-action)!: Update action actions/github-script (v8 → v9) by @smurf-bot[bot] in #424
• ci(github-action)!: Update action softprops/action-gh-release (v2 → v3) by @smurf-bot[bot] in #426
• feat(deps): update dependency better-sqlite3 (12.8.0 → 12.9.0) by @smurf-bot[bot] in #428
• fix(deps): update dependency dotenv (17.4.1 → 17.4.2) by @smurf-bot[bot] in #427
• fix(deps): update dependency com.android.tools.build:gradle (9.1.0 → 9.1.1) by @smurf-bot[bot] in #429
• feat(deps): update dependency redis (5.11.0 → 5.12.1) by @smurf-bot[bot] in #431
• fix(deps): update dependency @capgo/capacitor-updater (8.45.3 → 8.45.8) by @smurf-bot[bot] in #433
• ci(github-action): pin action joryirving/pr-reviewer-action to 3c04f7c by @smurf-bot[bot] in #434
• fix(mobile): reload page after mobile auth callback to prevent 401 loop by @itsmiso-ai in #432
• fix(deps): update dependency @capgo/capacitor-updater (8.45.8 → 8.45.9) by @smurf-bot[bot] in #435
• fix(deps): update capacitor monorepo (8.3.0 → 8.3.1) by @smurf-bot[bot] in #436
• fix org by @joryirving in #437
• chore: migrate renovate config to misospace by @joryirving in #438
• fix(deps): update dependency typescript (6.0.2 → 6.0.3) by @miso-assistant[bot] in #441
• Feat/rename claude by @joryirving in #442
• feat(deps): update dependency com.android.tools.build:gradle (9.1.1 → 9.2.0) by @miso-assistant[bot] in #443
• feat(deps): update dependency express-rate-limit (8.3.2 → 8.4.0) by @miso-assistant[bot] in #444
• Fix xmldom high severity vulnerability by @itsmiso-ai in #448
• misospace/miso-chat #446: cap WebSocket reconnect backoff delay by @itsmiso-ai in #450
• Add AGENTS.md for agent guidance by @itsmiso-ai in #447
• fix(deps): update dependency express-rate-limit (8.4.0 → 8.4.1) by @miso-assistant[bot] in #445
• Security audit fixes for issue #449 by @joryirving in #451

New Contributors

• @miso-assistant[bot] made their first contribution in #441

Full Changelog: 0.4.10...0.4.11

0.4.10

What's Changed

• fix(mobile): restore native onboarding and OTA affordance by @itsmiso-ai in #404
• fix(chat): strip tool output from rendered history by @itsmiso-ai in #403
• feat(ci): add wishlist cron PR review workflow by @itsmiso-ai in #409
• fix(chat): partial fix for #407 live send sanitization by @itsmiso-ai in #408
• fix(deps): update dependency @capgo/capacitor-updater (8.45.0 → 8.45.1) by @smurf-bot[bot] in #406
• feat(deps): update dependency dotenv (17.3.1 → 17.4.0) by @smurf-bot[bot] in #405

Full Changelog: 0.4.9...0.4.10