-
v2026.9.24
StableAll checks were successfulpublish-and-stage / decide (push) Successful in 9sCI / release-scripts (push) Successful in 12ssecurity-scan / Filesystem scan (trivy fs) (push) Successful in 19stag-release / release (push) Successful in 10ssecurity-scan / SBOM (trivy) (push) Successful in 12ssecurity-scan / JS SCA (npm audit) (push) Successful in 22ssecurity-scan / Python SAST (bandit) (push) Successful in 23spublish-and-stage / build (backend) (push) Has been skippedrelease-and-deploy / release (push) Successful in 22spublish-and-stage / build (frontend) (push) Has been skippedpublish-and-stage / build (push) Successful in 0spublish-and-stage / deploy-staging (push) Has been skippedrelease-and-deploy / release-scripts (push) Successful in 14ssecurity-scan / Python SCA (pip-audit) (push) Successful in 43sCI / frontend-test (push) Successful in 1m24sCI / pre-commit (push) Successful in 1m27srelease-and-deploy / frontend-test (push) Successful in 1m27srelease-and-deploy / pre-commit (push) Successful in 1m29srelease-and-deploy / build (frontend) (push) Successful in 1m45srelease-and-deploy / build (backend) (push) Successful in 1m53srelease-and-deploy / build (push) Successful in 0sCI / backend-test (push) Successful in 5m33srelease-and-deploy / backend-test (push) Successful in 5m21srelease-and-deploy / e2e (push) Successful in 6m27srelease-and-deploy / ci (push) Successful in 0sCI / e2e (push) Successful in 7m9srelease-and-deploy / deploy (push) Successful in 1m51sreleased this
2026-09-24 21:18:27 +00:00 | 53 commits to main since this releasePostvak & Meelezen
- Fixed: "Toon eerdere berichten" and "Toon N eerdere antwoorden" scrolled the
page up; the message you were reading now stays where it was. - "Tot hier gelezen" shows it is busy until the row has updated, and a row
read to the end hands focus to the next one. - Fixed: "Tot hier gelezen" stayed disabled after a deleted message or below a
very long one. - Fixed: a muted channel with a mention opened empty.
Under the hood
- The client address is the one the ZAD router appends to
X-Forwarded-For,
not the one the caller wrote: the app counts proxy hops
(WAGGLE_TRUSTED_PROXY_HOPS, image default 1) instead of uvicorn's
--forwarded-allow-ips, which ZAD had at*.
Container images
- Fixed: "Toon eerdere berichten" and "Toon N eerdere antwoorden" scrolled the