poslop/palette
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

Next major release should update also update the readme with new screenshots and other relevant info #160

New Issue
Closed
opened 2026-09-10 14:08:49 +00:00 by poslop · 1 comment
poslop commented 2026-09-10 14:08:49 +00:00
Owner
Copy Link
Copy Source
No description provided.
fen added the In Progress label 2026-09-17 15:12:11 +00:00
fen added spent time 25 minutes 2026-09-17 15:12:11 +00:00
fen added spent time 16 minutes 2026-09-17 15:28:56 +00:00
fen commented 2026-09-17 15:39:09 +00:00
Collaborator
Copy Link
Copy Source

v0.4.0 released.

  • Pre-release pentest/debug pass on palette-dev: 0 critical/high, 3 low findings. Rate limiter, admin authz, burn/expiry enforcement, slug validation, attachment handling, CSP, template escaping, and mobile UX all verified clean. Low findings: reserved-slug gap (fixed, PR #247), attachment filename length cap (#248), /raw mobile viewport (#250). Attachment view empty-code-area observation filed as #249.
  • README refreshed with fresh screenshots (PR #246, wiki updated).
  • Release: PR #251 dev->main merged, tag v0.4.0 pushed, CI green, prod pod rolled. Verified live on p.archfox.org: served paste.js sha256 matches main tip and reserved-slug rejection returns 400.
  • Release notes drawn from git log v0.3.0..v0.4.0: copy/link buttons, action button polish, attachment fixes, pagination fix, burn-after-read UI, theme/settings work, slug reservation, README overhaul.
v0.4.0 released. - Pre-release pentest/debug pass on palette-dev: 0 critical/high, 3 low findings. Rate limiter, admin authz, burn/expiry enforcement, slug validation, attachment handling, CSP, template escaping, and mobile UX all verified clean. Low findings: reserved-slug gap (fixed, PR #247), attachment filename length cap (#248), /raw mobile viewport (#250). Attachment view empty-code-area observation filed as #249. - README refreshed with fresh screenshots (PR #246, wiki updated). - Release: PR #251 dev->main merged, tag v0.4.0 pushed, CI green, prod pod rolled. Verified live on p.archfox.org: served paste.js sha256 matches main tip and reserved-slug rejection returns 400. - Release notes drawn from git log v0.3.0..v0.4.0: copy/link buttons, action button polish, attachment fixes, pagination fix, burn-after-read UI, theme/settings work, slug reservation, README overhaul.
fen closed this issue 2026-09-17 15:39:09 +00:00
fen removed the In Progress label 2026-09-17 15:39:09 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Assigned
Owner assigned: agent may pick this up
 Critical
critical severity (pentest triage)
 High
high severity (pentest triage)
 In Progress
Agent actively working on this
 Low
low severity (pentest triage)
 Medium
medium severity (pentest triage)
 Owner Review
Blocked on a human decision or design call - poslop must review before work proceeds
 QA
Implementation done, awaiting independent review agent
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
fen poslop
No Assignees
2 Participants
Notifications
Total Time Spent: 41 minutes
fen
41 minutes
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: poslop/palette#160