• v2026.9.24 471fe907b9

    v2026.9.24
    All checks were successful
    publish-and-stage / decide (push) Successful in 9s
    CI / release-scripts (push) Successful in 12s
    security-scan / Filesystem scan (trivy fs) (push) Successful in 19s
    tag-release / release (push) Successful in 10s
    security-scan / SBOM (trivy) (push) Successful in 12s
    security-scan / JS SCA (npm audit) (push) Successful in 22s
    security-scan / Python SAST (bandit) (push) Successful in 23s
    publish-and-stage / build (backend) (push) Has been skipped
    release-and-deploy / release (push) Successful in 22s
    publish-and-stage / build (frontend) (push) Has been skipped
    publish-and-stage / build (push) Successful in 0s
    publish-and-stage / deploy-staging (push) Has been skipped
    release-and-deploy / release-scripts (push) Successful in 14s
    security-scan / Python SCA (pip-audit) (push) Successful in 43s
    CI / frontend-test (push) Successful in 1m24s
    CI / pre-commit (push) Successful in 1m27s
    release-and-deploy / frontend-test (push) Successful in 1m27s
    release-and-deploy / pre-commit (push) Successful in 1m29s
    release-and-deploy / build (frontend) (push) Successful in 1m45s
    release-and-deploy / build (backend) (push) Successful in 1m53s
    release-and-deploy / build (push) Successful in 0s
    CI / backend-test (push) Successful in 5m33s
    release-and-deploy / backend-test (push) Successful in 5m21s
    release-and-deploy / e2e (push) Successful in 6m27s
    release-and-deploy / ci (push) Successful in 0s
    CI / e2e (push) Successful in 7m9s
    release-and-deploy / deploy (push) Successful in 1m51s
    Stable

    Ghost released this 2026-09-24 21:18:27 +00:00 | 53 commits to main since this release

    Postvak & Meelezen

    • Fixed: "Toon eerdere berichten" and "Toon N eerdere antwoorden" scrolled the
      page up; the message you were reading now stays where it was.
    • "Tot hier gelezen" shows it is busy until the row has updated, and a row
      read to the end hands focus to the next one.
    • Fixed: "Tot hier gelezen" stayed disabled after a deleted message or below a
      very long one.
    • Fixed: a muted channel with a mention opened empty.

    Under the hood

    • The client address is the one the ZAD router appends to X-Forwarded-For,
      not the one the caller wrote: the app counts proxy hops
      (WAGGLE_TRUSTED_PROXY_HOPS, image default 1) instead of uvicorn's
      --forwarded-allow-ips, which ZAD had at *.

    Container images