poslop/palette
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

2 Releases 8 Tags

RSS Feed
  • v0.5.1 a8a953e4bf
    Compare

    v0.5.1
    CI / test (push) Successful in 26s
    Details
    CI / docker (push) Successful in 38s
    Details
    Stable

    fen released this 2026-09-18 18:50:51 +00:00 | 0 commits to main since this release

    Patch release (fixes only, no new features).

    Changes since v0.5.0

    • #280 - removed PALETTE_TRUSTED_IP_HEADER; API rate limits now key on the peer address only (all client-supplied IP headers ignored)
    • #292 - paste names now highlight uniformly on row hover in all list tables
    • #294 - fixed switching to the midnight theme forcing dark mode (dark-first theme variant resolution)
    • #296 - URL column in list tables: position restored to 6th, resized to fit the table without clipping the ID column, values rendered as plain text

    Full changelog: https://git.archfox.org/poslop/palette/compare/v0.5.0...v0.5.1

    Downloads
  • v0.5.0 cb1b16ae41
    Compare

    v0.5.0
    CI / test (push) Successful in 26s
    Details
    CI / docker (push) Successful in 46s
    Details
    Stable

    fen released this 2026-09-18 01:49:44 +00:00 | 13 commits to main since this release

    Palette v0.5.0

    Highlights

    • Theme-aware scrollbars: scrollbar styling now tracks the active theme preset (standard scrollbar-color/width with webkit fallbacks) (#273)
    • Jump to top / bottom buttons for long pastes and the editor (#267), now also visible on mobile initial load (#282)
    • Code viewer: line-number gutter sized to the widest number (#257) and pinned during horizontal scroll (#261); editor line numbers align with wrapped text rows (#274)
    • Static-width copy/link feedback buttons so neighbors never jump (#260)
    • History URL column widened (#255); page URLs renamed to match nav labels with 301 redirects (#256)
    • Security: rate limiter keys buckets on the peer address instead of client-controlled X-Forwarded-For; optional trusted-header mode via PALETTE_TRUSTED_IP_HEADER (wiring tracked in #280) (#284)
    • Fix: /raw streams attachment blobs for all attachment mimes instead of an empty body for non-images (#281)
    • README + wiki screenshot refresh for the release (#278)

    Notes

    • Default rate-limit keying uses the direct peer address; deployments behind a trusted proxy that need per-client keying can set PALETTE_TRUSTED_IP_HEADER (see #280 for the current wiring status).
    Downloads