{"tags":[{"annotation":{"message":"Version 0.7.1\n\nSecurity fixes:\n\n- Upgrade `rustls-webpki` to latest to reject insecure certificates - oyster.cafe (did:plc:3fwecdnvtcscjnrx2p4n7alz)\n","tagger":{"email":"johanna.a.m.larsson@gmail.com","name":"Johanna Larsson","when":"2026-10-20T19:36:10.000000+01:00"}},"author":{"email":"johanna.a.m.larsson@gmail.com","name":"Johanna Larsson","when":"2026-10-20T19:31:47.000000+01:00"},"message":"v0.7.1\n","name":"v0.7.1","oid":"4e5ded7de520e4cc38ab54e70abb60ecb5f86d60"},{"annotation":{"message":"Version 0.7.0\n\nBreaking changes:\n\n- Tranquil no longer uses the AWS crates for S3 support, instead using a pure S3 crate. This means you must pass `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` on start up to use S3 - jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)\n- `subscribeRepos` is now rate limited, allowing 1 request per minute per IP, with a burst of 5 - jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)\n- Tranquil now enforces a maximum record size of 1MB for the CBOR record. Additionally, a batch of records where the total bytes of the combined commit event surpass 2MB is also rejected. - jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)\n\nFeatures and noteworthy implementation changes:\n\n- Tranquil now produces container images automatically from main, tagging each revision. There's also a `main` tag for those who wish to live dangerously - jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)\n- There's an alpine linux installation guide! - koi.rip (did:plc:b26ewgkrnx3yvsp2cdao3ntu)\n- We have CI workflows for test+lint, and tests and compilation is much faster - jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)\n- Support for scrypt passwords is in - oyster.cafe (did:plc:3fwecdnvtcscjnrx2p4n7alz) and scanash.com (did:plc:3i6uzuatdyk7rwfkrybynf5j)\n- We now have a \"light\" LLM policy - oyster.cafe (did:plc:3fwecdnvtcscjnrx2p4n7alz)\n- Add notification templates capability for customizing notifications with examples - oyster.cafe (did:plc:3fwecdnvtcscjnrx2p4n7alz) and straiforos.tngl.sh (did:plc:bomby4msfvfsco4rno2yfpg7)\n\nBug fixes:\n\n- Actually pass the scope's aud with the service fragment - lou.gg (did:plc:w64dlsa4zwjv2wljlvmymldc)\n- Handle wildcard + aud in OAuth scopes - jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)\n- During migration, log in to the new PDS by DID and not email - okami.mom (did:plc:3rwz3xfw2crswgifqgc3g7zh)\n- A whole series of auth fixes - quilling.dev (did:plc:jrtgsidnmxaen4offglr5lsh)\n- Don't ask for a verification code if the account has no email - steffo.eu (did:plc:6l7xbgjswn2oauofpz3xagvg)\n- Fix case where iOS client cookies are stripped during OAuth redirect - natalie.sh (did:plc:k644h4rq5bjfzcetgsa6tuby)\n- Stop showing clear text password after revoking - hayden.moe (did:plc:puvaym5ytsvejx3rwjrnxhvb)\n- Stop buffering streaming blob uploads - jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)\n- Correctly abort multipart uploads on error, prevent leaving incomplete parts in bucket - jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)\n","tagger":{"email":"johanna.a.m.larsson@gmail.com","name":"Johanna Larsson","when":"2026-10-18T13:05:53.000000+01:00"}},"author":{"email":"johanna.a.m.larsson@gmail.com","name":"Johanna Larsson","when":"2026-10-18T12:53:41.000000+01:00"},"message":"v0.7.0\n","name":"v0.7.0","oid":"da1aed0ed8cc24c98a8b892f57cd8eb09f0f9d9a"},{"annotation":{"message":"Version 0.6.7\nFeatures and noteworthy implementation changes:\n- OAuth tokens now get their scopes, collapsed into the minimal equivalent set and brotli compressed to minimise the size of tokens. Thanks lou.gg (did:plc:w64dlsa4zwjv2wljlvmymldc)!\n- Update getServiceAuth to support the new aud parameter as per proposal 0014 (https://github.com/bluesky-social/proposals/tree/main/0014-service-auth-revised). Thanks lou.gg (did:plc:w64dlsa4zwjv2wljlvmymldc)!\n- Second OAuth flow and consent screen overhaul to better support transitional scopes, and to be more robust to erroneous or nonsensical scope requests. Thanks trezy.codes (did:plc:4jrld6fwpnwqehtce56qshzv)!\n- The S3 blob storage backend now supports a path config parameter. Thanks calico.lgbt (did:plc:qthgnl7ryv5fmh6lnssdmo6w)!\n- Unified various in-mem caches into the PDS cache.\n- Tranquil now serves on-demand TLS responses suitble for Caddy under `/.well-known/caddy/ask`.\n\nBug fixes:\n- Fix the URI parsing to support non-authority URIs. Thanks jack.is (did:plc:cwdkf4xxjpznceembuuspt3d)!\n- Restore RPC scopes for delegation presets. Thanks trezy.codes (did:plc:4jrld6fwpnwqehtce56qshzv)!\n- Keep blob ownership per user so we don't risk deleting an in-use blob that's used by multiple people. Thanks jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)!\n- Add MIME version to out going emails as mandated by RFC 2045. Thanks luna.pds.devcat.one (did:plc:qij7bjzgwlshfr2fljkjd7gc)!\n- Loosen CORS header requirements to be more flexible to apps adding unexpected headers. Thanks jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)!\n- Don't accidentally block migrations by denying signPlcOperation requests that remove the PDSs rotation keys.\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-09-20T22:31:07.000000+02:00"}},"author":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-09-20T18:52:15.000000+02:00"},"message":"chore: bump version to 0.6.7\n","name":"v0.6.7","oid":"75c341b94b9b4a1525a7bd370adbb0b72efea629"},{"annotation":{"message":"Version 0.6.6\n\nMajor changes:\n\n- Permission sets now work properly with delegated accounts and the permission consent screen has gotten a face lift. Thanks trezy.codes (did:plc:4jrld6fwpnwqehtce56qshzv)!\n- To support Bluesky Tranquil has to implement a variety of non-spec behaviours. These can now be disabled at compile time with the `bsky-support` Cargo feature.\n Additionally the `bsky` Cargo feature can now be used to disable Bluesky specific features like the age assurance override.\n- Postgres now also supports the kind of structural repair that was added to tranquil-store last version.\n- Tranquil can now also serve HTTP/3 traffic on it's own.\n- The ripple cache backend now uses QUIC instead of TCP.\n\nNotable bug fixes and smaller best practice or compatibility changes:\n\n- Inter service auth tokens are now minted with uppercase `JWT` instead of lowercase `jwt` in the `typ` header claim. Thanks ave.zone (did:plc:mchrltkrhuzpxleiwpmmvpar)!\n- At least for now cred auth token expiry time now matches the higher expirys of the ref impl. Thanks ave.zone (did:plc:mchrltkrhuzpxleiwpmmvpar)!\n- At least for now cred auth token reuse has been given a 2 hour grace period to match the ref impl behaviour. Thanks ave.zone (did:plc:mchrltkrhuzpxleiwpmmvpar)!\n- did:web accounts are no longer required to have the bogus #atproto_reserved verification method in their DID document during sign up.\n- tranquil-store has recieved a variety of op related bug fixes.\n- autocomplete is now no longer blocked for the TOTP field during login. Thanks igneousflock.dev (did:plc:mwpubvpiaddthywa6tqvg7kv)!\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-07-26T00:26:37.000000+02:00"}},"author":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-07-25T23:49:09.000000+02:00"},"message":"chore: bump version to 0.6.6\n","name":"v0.6.6","oid":"72fa88d79adfd30fb29e330987bb3cb0eb51f310"},{"annotation":{"message":"Version 0.6.5\n\n- (PR#175) Authenticated Bluesky feedgens now work properly. Thank you to @ave.zone (did:plc:mchrltkrhuzpxleiwpmmvpar).\n- (PR#162) putRecord without a $type now pulls the type off of the collection instead of failing.\n- tranquil-store now has some MST self healing features.\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-06-04T21:44:45.000000+02:00"}},"author":{"email":"git@ave.zone","name":"ave","when":"2026-06-04T10:34:18.000000Z"},"message":"fix(proxy): limit audience of getFeed service-auth to the feed generator\n","name":"v0.6.5","oid":"91999819c616afbb26586dce4e1ab70f767684de"},{"annotation":{"message":"- Firehose no longer drops events when sequence numbers commit out of order.\n- Migration follows the oauth account:* spec (ie. *don't* use that lol) and supports p256 keys.\n- Nix data storage paths now default off the dataDir option.\n- TlsConfig rejects unknown keys, and the toolchain moves to rust 1.96.\n","tagger":{"email":"lu5a@proton.me","name":"lewis","when":"2026-05-30T21:23:18.000000+03:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-05-30T21:18:16.000000+03:00"},"message":"chore: bump to 0.6.4\n\nLewis: May this revision serve well! \n","name":"v0.6.4","oid":"7e4c9e1daba4b72906d0a37c504302ec48228963"},{"annotation":{"message":"Version 0.6.3\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:30:52.000000+02:00"}},"author":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:27:28.000000+02:00"},"message":"build: bump version to 0.6.3\n","name":"v0.6.3","oid":"e85394c3144e780ac8e75a8cf8955cf929d417b0"},{"annotation":{"message":"Version 0.6.2\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:08:22.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-05-16T23:24:55.000000+03:00"},"message":"build: bump workspace to 0.6.2\n\nLewis: May this revision serve well! \n","name":"v0.6.2","oid":"bdaf510898c9675bd4ea7acc7ddd524d453be9c8"},{"annotation":{"message":"Version 0.6.0\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:07:54.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-04-30T12:27:10.000000+03:00"},"message":"feat(tranquil-comms): prework for email\n\nLewis: May this revision serve well! \n","name":"v0.6.0","oid":"b1d86caa7848a006683a017c8effdfdf63709316"},{"annotation":{"message":"Version 0.5.7\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:07:31.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-04-27T11:34:42.000000+03:00"},"message":"fix(tranquil-pds): same-rkey batch semantics and firehose lag recovery\n\nLewis: May this revision serve well! \n","name":"v0.5.7","oid":"8f7aad3756fe0afa384eaf45cf35f804f16c0c4e"},{"annotation":{"message":"Version 0.5.6\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:07:04.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-04-24T14:01:36.000000+03:00"},"message":"fix(tranquil-pds): firehose car carries inductive proof\n\nLewis: May this revision serve well! \n","name":"v0.5.6","oid":"180de2998450d831e864cd4832ffa843eac5d209"},{"annotation":{"message":"Version 0.5.5\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:06:24.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-04-15T22:38:12.000000+03:00"},"message":"fix(lexicons): cache ttl\n\nLewis: May this revision serve well! \n","name":"v0.5.5","oid":"b9574f3ec144bba9b06397bd387fa53f028b7726"},{"annotation":{"message":"Version 0.5.4\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:06:02.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-04-13T20:22:18.000000+03:00"},"message":"fix(tranquil-store): exclude 0 refcount blocks from has()\n\nLewis: May this revision serve well! \n","name":"v0.5.4","oid":"d51bfd59da71c3d283eeb803050d7c07d7742a97"},{"annotation":{"message":"Version 0.5.3\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:05:30.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-04-13T13:26:49.000000+03:00"},"message":"fix(repo): use mst diff instead of full tree walk for obsolete blocks\n\nLewis: May this revision serve well! \n","name":"v0.5.3","oid":"8ccdd30cb3159d9c103c3c76a7b330710e5e98c3"},{"annotation":{"message":"Version 0.5.2\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:05:05.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-04-12T17:57:33.000000+03:00"},"message":"fix(postgres): semaphore on car endpoint & more efficient query\n\nLewis: May this revision serve well! \n","name":"v0.5.2","oid":"1dfbd27cce9784a1bb7e2f85441473c1506647d6"},{"annotation":{"message":"Version 0.5.1\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:04:25.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-04-12T10:38:31.000000+03:00"},"message":"feat(oauth): discoverable passkey authentication\n\nLewis: May this revision serve well! \n","name":"v0.5.1","oid":"34f050a1f0dce0167ae71e705fd0a8a7cf878428"},{"annotation":{"message":"Version 0.5.0\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:04:05.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-03-28T13:43:28.000000-07:00"},"message":"feat(tranquil-store): whole test suite working\n\nLewis: May this revision serve well! \n","name":"v0.5.0","oid":"8d0e0c6810badd4f46f60037a5824873bce6d1ca"},{"annotation":{"message":"Version 0.4.7\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:02:54.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-03-21T13:17:48.000000+02:00"},"message":"feat(signal): add postgres-backed signal protocol store\n","name":"v0.4.7","oid":"e6c8a44a42e7d0b158ea8188c02b1b6047177973"},{"annotation":{"message":"Version 0.4.6\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:02:25.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-03-19T19:51:07.000000+02:00"},"message":"refactor(api): extract common helpers module, extend API error types with auth methods\n","name":"v0.4.6","oid":"4d86f026dfaea61732abe4ba36657a0054364358"},{"annotation":{"message":"Version 0.4.5\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:01:54.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-03-18T18:36:16.000000+02:00"},"message":"refactor: update routes, backend verification tweaks, and restyle\n","name":"v0.4.5","oid":"5c8894d531d2a5f1a945114548fe79f96f0e214f"},{"annotation":{"message":"Version 0.4.4\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:01:11.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-03-18T12:52:43.000000+02:00"},"message":"fix(backups): remove useless backups concept\n","name":"v0.4.4","oid":"ebf5af49223675980f78df92fdd750d21f6bcd54"},{"annotation":{"message":"Version 0.4.3\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T19:00:41.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-03-16T20:24:33.000000+02:00"},"message":"feat: cross-pds delegation\n","name":"v0.4.3","oid":"7926c798c663ecc7d3629c99c77351fb2cbbf5da"},{"annotation":{"message":"Version 0.4.2\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T18:59:39.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-03-15T22:07:53.000000+02:00"},"message":"fix: move code to more correct crates\n","name":"v0.4.2","oid":"d5ed420dd7fb4ccadfc1f6e41974ea8349bd24c4"},{"annotation":{"message":"Version 0.4.1\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T18:58:40.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-03-14T12:33:11.000000+02:00"},"message":"fix(auth): use authextractor for serviceauth too now\n","name":"v0.4.1","oid":"546d3421367633457273563f85152b5fdd8cdd6b"},{"annotation":{"message":"Version 0.4.0\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T18:57:36.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-03-12T12:52:00.000000+02:00"},"message":"refactor(pds): integrate tranquil-lexicon for record validation\n","name":"v0.4.0","oid":"458b9b7e0d756ae5c723b0efa425d74b4ded9668"},{"annotation":{"message":"Version 0.3.1\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T18:56:52.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"Lewis","when":"2026-03-09T15:20:08.000000+02:00"},"message":"fix: did:web also uses handle domains not hostname\n","name":"v0.3.1","oid":"2c8568b20794359155bc87967d7c0a4cdd364da6"},{"annotation":{"message":"Version 0.3.0\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T18:55:55.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"lewis","when":"2026-03-08T11:21:55.000000+02:00"},"message":"fix: user handle domains upgrade\n","name":"v0.3.0","oid":"f78b004df3d3266cf1769ca715bf9a5513735031"},{"annotation":{"message":"Version 0.2.1\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T18:54:36.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"lewis","when":"2026-02-10T17:18:40.000000+02:00"},"message":"fix: bulk type safety improvements, added a couple of tests\n","name":"v0.2.1","oid":"91cfc536c62094ab6cef82aef426f75ee08d7e92"},{"annotation":{"message":"Version 0.2.0\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T18:47:46.000000+02:00"}},"author":{"email":"lu5a@proton.me","name":"lewis","when":"2026-02-07T00:01:17.000000+02:00"},"message":"feat: initial in-house cache distribution\n","name":"v0.2.0","oid":"326aadcdb6e56a09261d79bf6c5d9dc93977c09a"},{"annotation":{"message":"Version 0.1.0\n","tagger":{"email":"nel.n.lindberg@gmail.com","name":"nelind","when":"2026-05-27T18:45:20.000000+02:00"}},"author":{"email":"did:plc:3fwecdnvtcscjnrx2p4n7alz","name":"Lewis","when":"2025-12-03T18:07:07.000000+02:00"},"message":"Initial idea\n","name":"v0.1.0","oid":"9c326604bddbf99973c4ad5fd5f7e12c2570c73f"}],"total":30}