Nostr notes by nostr-summary

[ besoeasy/gupt ] docs: showcase passwords, notes, and bookmarks ...

2026-08-11T09:01:17Z

[ besoeasy/gupt ] docs: showcase passwords, notes, and bookmarks in the README

Co-authored-by: Cursor <cursoragent@cursor.com>
https://github.com/besoeasy/gupt/commit/5c8001b0cc2fc123ec0a72efdd7c168b64844b95

[ chebizarro/nostrc ] Record Concord invite and snapshot work in ...

2026-08-11T09:01:15Z

[ chebizarro/nostrc ] Record Concord invite and snapshot work in beads

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
https://github.com/chebizarro/nostrc/commit/b33fa6236da927c3669b991bf114b613623c3bf8

[ getAlby/hub ] fix: remove request bodies from error logs ...

2026-08-11T09:01:13Z

[ getAlby/hub ] fix: remove request bodies from error logs (#2533)

The Wails request router included the full request body in its error
log entries, and the HTTP app creation handler logged the whole request
struct on failure. Log only the route, method and error instead,
matching the existing behavior of the /api/mnemonic handler, and log
only the route and method for requests in the desktop frontend.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
https://github.com/getAlby/hub/commit/4402d2fff88b86c9e4136f616260ebb83d304074

[ nostria-app/nostria ] feat: update media queries for responsive ...

2026-08-11T09:01:11Z

[ nostria-app/nostria ] feat: update media queries for responsive design and standardize payment method icon
https://github.com/nostria-app/nostria/commit/c38ab16a21c2708bd56808478de97077419ef18b

[ forgesworn/sapwood ] chore: normalise copyright casing to ...

2026-08-11T09:01:09Z

[ forgesworn/sapwood ] chore: normalise copyright casing to ForgeSworn
https://github.com/forgesworn/sapwood/commit/db0fb3d6cbc83527c9fe59c1d73a4d78b8c91cd4

[ forgesworn/private-equality ] chore: normalise copyright casing ...

2026-08-11T09:01:08Z

[ forgesworn/private-equality ] chore: normalise copyright casing to ForgeSworn
https://github.com/forgesworn/private-equality/commit/fb9e1a6995fc223f9b07fc92456614081d27a781

[ forgesworn/toll-booth-dvm ] chore: add MIT license ...

2026-08-11T09:01:05Z

[ forgesworn/toll-booth-dvm ] chore: add MIT license
https://github.com/forgesworn/toll-booth-dvm/commit/790106e8502ee84e1e613ef9d415f93469f20dc2

[ forgesworn/toll-booth-announce ] chore: add MIT license ...

2026-08-11T09:01:03Z

[ forgesworn/toll-booth-announce ] chore: add MIT license
https://github.com/forgesworn/toll-booth-announce/commit/ce3cdfa1fd6356881dec9fab978bc02364aa9a7d

[ forgesworn/nostr-veil ] chore: add MIT license ...

2026-08-11T09:01:02Z

[ forgesworn/nostr-veil ] chore: add MIT license
https://github.com/forgesworn/nostr-veil/commit/97afae353c57ad6fb75035d145387a8e2576fcf9

[ forgesworn/nostr-anon-vote ] chore: add MIT license ...

2026-08-11T09:01:00Z

[ forgesworn/nostr-anon-vote ] chore: add MIT license
https://github.com/forgesworn/nostr-anon-vote/commit/787f16e676275ca45d5735bdd79cd48b6a73763a

[ forgesworn/nip-drafts ] chore: add MIT license ...

2026-08-11T09:00:58Z

[ forgesworn/nip-drafts ] chore: add MIT license
https://github.com/forgesworn/nip-drafts/commit/480bcddd0a0c56967907ced49579f7e7795df15e

[ forgesworn/bark ] chore: add MIT license ...

2026-08-11T09:00:56Z

[ forgesworn/bark ] chore: add MIT license
https://github.com/forgesworn/bark/commit/f0fa9f1f99496d928ac9da9826573612ce04cbd2

[ forgesworn/402-pub ] chore: add MIT license ...

2026-08-11T09:00:54Z

[ forgesworn/402-pub ] chore: add MIT license
https://github.com/forgesworn/402-pub/commit/0f2fa9c92416b0c912029b2279b8b7f29deef91b

[ forgesworn/402-indexer ] chore: add MIT license ...

2026-08-11T09:00:52Z

[ forgesworn/402-indexer ] chore: add MIT license
https://github.com/forgesworn/402-indexer/commit/366d96fe33dbbcb82852ca42b177ef4e756ce35f

[ nostrfi/relay ] Add NIP-01 grammar, malformed-input, ...

2026-08-10T21:00:53Z

[ nostrfi/relay ] Add NIP-01 grammar, malformed-input, duplicate-event, and concurrency conformance tests (#12)

Phase 1 of the interoperability and capacity baseline work: adds
integration coverage the suite was missing per protocol-support.md's
"Conformance work still needed" list. Covers malformed/invalid message
shapes (non-array, empty array, wrong type, malformed JSON), unknown
message types and CLOSE of an unknown subscription (both documented as
silent no-ops rather than dropped connections), trailing extra array
elements being ignored, and a REQ with zero filter objects matching
nothing (distinct from NIP-01's single-empty-filter-object "match
https://github.com/nostrfi/relay/commit/ba07d283393695989385632dd9c4cdfbdabd7deb

[ privkeyio/wisp ] Assert the vendored httpz matches upstream ...

2026-08-10T21:00:51Z

[ privkeyio/wisp ] Assert the vendored httpz matches upstream plus its recorded patch (#167)

build.zig.zon depends on vendor/httpz by path, so the Zig package manager
no longer hashes it. Nothing in the repo would notice an edit to 15k lines
of vendored HTTP and WebSocket code, and reviewing that much vendored
source by eye is not a control anyone can rely on.

CI now asserts vendor/httpz equals upstream at the pinned commit plus
exactly the delta in vendor/httpz.patch, which becomes the reviewable
record of what we changed. Upstream is fetched by commit SHA rather than
https://github.com/privkeyio/wisp/commit/216e70c02a7cebcd746f0de3a1bc16e5f6ea00b2

[ zig-nostr/nostr ] chore: release v0.4.0 (#74) ...

2026-08-10T21:00:48Z

[ zig-nostr/nostr ] chore: release v0.4.0 (#74)
https://github.com/zig-nostr/nostr/commit/c6737775198d796f828792bce2ee09adbccf5d9e

[ chebizarro/nostrc ] Record nostrc-csnv completion ...

2026-08-10T21:00:46Z

[ chebizarro/nostrc ] Record nostrc-csnv completion
https://github.com/chebizarro/nostrc/commit/db699595292eeafb92f2dd9e0dc865dc1630577b

[ fr34aky/fips-exit-gate ] Add cmd/fake-cashu-mint to test Cashu ...

2026-08-10T21:00:44Z

[ fr34aky/fips-exit-gate ] Add cmd/fake-cashu-mint to test Cashu locally without a mint or channel

Lets you exercise the accept-and-melt flow with no real mint and no Lightning
channel — the Cashu analogue of cmd/fake-phoenixd:
- NUT-05 melt quote/melt endpoints; on melt it drives fake-phoenixd's /sim so the
"payment" arrives and the backend grants (verified end to end: melt -> sim ->
signed webhook -> 200).
- GET /sim/token?amount=N returns a pasteable cashuA token pointing at itself.
- fake-phoenixd's /payments/incoming now also reports amountSat so the mint can
quote the real invoice amount.
https://github.com/fr34aky/fips-exit-gate/commit/2958838fc92c7ffe4d8945508bd770b8fc83ab02

[ radrootslabs/lib ] merge: reconcile canonical relay authority - ...

2026-08-10T21:00:41Z

[ radrootslabs/lib ] merge: reconcile canonical relay authority

- Merge the current public Lib master into the service-hardening history.
- Preserve canonical relay read-write behavior across mobile and SDK surfaces.
- Normalize libc metadata for contract-parser compatibility.
- Verify affected tests, contracts, Clippy, and rustdoc through extbuild.
https://github.com/radrootslabs/lib/commit/99bc178f53b7dea0d5b839141e7d77fc988dd718

[ zig-nostr/plaza ] Say what actually happened in the inbox ...

2026-08-10T21:00:37Z

[ zig-nostr/plaza ] Say what actually happened in the inbox (#184)

Two rules, both wrong in a way the reader could see.

A `p` tag on a note was read as a mention. NIP-10 has a reply carry
every `p` tag of its parent plus the parent's author, so one word posted
into a thread puts the reader's key on every message in that thread from
then on. Every later exchange between two other people, in any
conversation the reader ever touched, therefore arrived as "X mentioned
you in a note". In a busy thread that is the commonest row in the inbox:
https://github.com/zig-nostr/plaza/commit/455490dacb39abec5bbc7653756b224434257551

[ trevarj/nostr.el ] feat(conversations): group the page by ...

2026-08-10T10:00:45Z

[ trevarj/nostr.el ] feat(conversations): group the page by thread and give every row context

- select one Conversations row per thread, keyed on the root id and
represented by the newest reply, with the collapsed reply count
- render a context line naming the parent author and a 60-column snippet
instead of the constant `reply' badge, falling back to a short thread id
- name the thread page and buffer after the root author and short id
instead of 64 characters of hex
https://github.com/trevarj/nostr.el/commit/ed3f5e5f50d00fcd7383b3aa3e0035ae147a8499

[ arbadacarbaYK/gittr ] fix: require matching Nostr tip before ...

2026-08-10T10:00:43Z

[ arbadacarbaYK/gittr ] fix: require matching Nostr tip before CVE alerts

Refuse bridge-only scans when kind 30618 is missing or disagrees with
the gittr mirror, and spell that out on Settings/Help so other-client
users are not surprised.
https://github.com/arbadacarbaYK/gittr/commit/bf874f7b0b5616c3f21db3c3bb917d96acb0bcbf

[ styx-secure/styx ] Phase B2.1: add restore-safe PhaseB1 ...

2026-08-10T08:00:57Z

[ styx-secure/styx ] Phase B2.1: add restore-safe PhaseB1 recovery boundary (#148)

Refs #147
https://github.com/styx-secure/styx/commit/0bcd19f114ad1dd9cc419a8c53f0d53d33428ac0

[ nostria-app/nostria ] style: improve layout and spacing for ...

2026-08-10T08:00:55Z

[ nostria-app/nostria ] style: improve layout and spacing for thread replies and avatars in encrypted component
https://github.com/nostria-app/nostria/commit/07c56b11a192e0b88cf1d48e6ed472286220ffc8

[ wolfboypittsfield828/project-nomad ] Add model download to ...

2026-08-10T08:00:53Z

[ wolfboypittsfield828/project-nomad ] Add model download to FAQ.md
https://github.com/wolfboypittsfield828/project-nomad/commit/97f92cda6e3f5dc1ee777a49d7407424fbafac64

[ vgiappnee-web/nostr-wot ] Update README.md ...

2026-08-10T08:00:51Z

[ vgiappnee-web/nostr-wot ] Update README.md
https://github.com/vgiappnee-web/nostr-wot/commit/716745214ebcf1cdace9d903f4cca20b6496950e

[ getAlby/hub ] feat: enable migration from postgres to sqlite ...

2026-08-10T08:00:49Z

[ getAlby/hub ] feat: enable migration from postgres to sqlite (#2524)

Allows users running Alby Hub on postgres (e.g. Alby Cloud) to create a
migration file from Settings -> Migrate Alby Hub. The contents of the
postgres database are copied into a temporary local sqlite database
which is included in the migration file, so it can be imported into a
fresh sqlite-based hub.

- extract the db_migrate CLI copy logic into a shared db.MigrateDB
- also copy the swaps and forwards tables (previously silently dropped)
https://github.com/getAlby/hub/commit/ffee8cbcbeab3969654604a45076af8e094a523a

[ permissionlesstech/bitchat ] Deflake AppArchitectureTests: ...

2026-08-10T08:00:45Z

[ permissionlesstech/bitchat ] Deflake AppArchitectureTests: raise the local waitUntil to settleTimeout (#1653)

* Deflake AppArchitectureTests: raise the local waitUntil to settleTimeout

The file-local waitUntil defaulted to 3s — below the documented
minimumSettleTimeout floor — and the recent-chats geo-dedup wait
missed it on a loaded runner right after merge (the Combine hop
through receive(on: .main) was starved). Every caller waits for a
condition to become true, so green runs return immediately and never
pay the 30s deadline.
https://github.com/permissionlesstech/bitchat/commit/dba67c1466b79855cb513ed68b07ae91c72ccfe2

[ Chewerphalguna599/genesis-mind ] Update README.md ...

2026-08-10T04:00:46Z

[ Chewerphalguna599/genesis-mind ] Update README.md
https://github.com/Chewerphalguna599/genesis-mind/commit/c95ff1c9f9fc63876603b9dbf1aed09529d3cfdd

[ crocs-muni/scrutiny-fabric ] fix(docs): quote the parenthesised ...

2026-08-09T14:00:59Z

[ crocs-muni/scrutiny-fabric ] fix(docs): quote the parenthesised label in the README mermaid graph
https://github.com/crocs-muni/scrutiny-fabric/commit/29c838092e0e66059cea4ea3b2ec0b10ebc5f5fc

[ plotsklapps/GYMPLY ] chore: update flutter_secure_storage ...

2026-08-09T14:00:57Z

[ plotsklapps/GYMPLY ] chore: update flutter_secure_storage dependency to version 11.0.0
https://github.com/plotsklapps/GYMPLY/commit/80d65515bbab7e652e7386a4a8f4aa59e093ba2c

[ zig-nostr/plaza ] Show who a note will notify, and let them be ...

2026-08-09T14:00:55Z

[ zig-nostr/plaza ] Show who a note will notify, and let them be switched off (#173)

Replies started tagging every author in the thread, which is what the reference
clients do and what makes a conversation reach the people in it. It also means
one reply can notify a dozen people, and until now the first anybody knew about
that was the notification arriving.

The composer and the reply box now list who will be tagged, as names you can
press to switch off. Switched off stays on screen, dimmed, because a chip that
vanished when pressed would leave nothing to press to bring the person back.
https://github.com/zig-nostr/plaza/commit/e0347ae9c1c571dc596ec74dfdf4778e39a83a96

[ arbadacarbaYK/gittr ] fix: hydrate browser local copy for ...

2026-08-09T14:00:53Z

[ arbadacarbaYK/gittr ] fix: hydrate browser local copy for bridge repos before edit

Refresh no longer aborts on the first empty relay EOSE, persists the
bridge file tree into localStorage, and Upload/New file auto-prepare a
local shell so Push works without a cryptic failure.
https://github.com/arbadacarbaYK/gittr/commit/38f547af38c3d73ffc8d8cd1703805374b0b9ef4

[ bitoslabs/bitos-svelte ] Merge pull request #19 from ...

2026-08-09T14:00:51Z

[ bitoslabs/bitos-svelte ] Merge pull request #19 from bitoslabs/develop

feat: update version to 0.1.4 and enhance actor summary and link hand…
https://github.com/bitoslabs/bitos-svelte/commit/7d443784545402cc725007c0564ba6a9b5427d4c

[ forgesworn/bark ] Merge remote-tracking branch ...

2026-08-09T14:00:47Z

[ forgesworn/bark ] Merge remote-tracking branch 'origin/dependabot/github_actions/actions/configure-pages-6.0.0'

# Conflicts:
# .github/workflows/pages.yml
https://github.com/forgesworn/bark/commit/e509e35c2aa1acf3a831f880243879a774b95689

[ Chewerphalguna599/genesis-mind ] Update README.md ...

2026-08-09T14:00:42Z

[ Chewerphalguna599/genesis-mind ] Update README.md
https://github.com/Chewerphalguna599/genesis-mind/commit/0aa6dc128bab0df84665df911fed30e6f0a4fbcc

[ steve02081504/fount ] Preserve Pages redirect query/hash and ...

2026-08-08T14:01:12Z

[ steve02081504/fount ] Preserve Pages redirect query/hash and welcome UTM visitors (#292)

Co-Authored-By: Taromati2 <taromati2@outlook.com>
https://github.com/steve02081504/fount/commit/106fd12f3b7582aa472865d1ea5cb334eacdbaf0

[ forgesworn/sapwood ] test: keep unit tests off the network with ...

2026-08-08T14:01:10Z

[ forgesworn/sapwood ] test: keep unit tests off the network with an inert WebSocket stub

Components under test reach for a real socket indirectly (RelayEditor's
health probe, nostr-tools pools), and one that finished connecting after
its test tore down crashed the run: undici fires the open event into the
jsdom globals and Node rejects the cross-realm Event. All 777 tests
passed, vitest still exited 1. It hit three of the last eight Hetzner
deploys.

A vitest setup file now stubs the global WebSocket with an inert class
https://github.com/forgesworn/sapwood/commit/e7359d0b6e4fd7131d186b86fcbebabd9ab2aa32

[ arbadacarbaYK/gittr ] fix: block javascript:/data: URLs from ...

2026-08-08T14:01:08Z

[ arbadacarbaYK/gittr ] fix: block javascript:/data: URLs from Nostr events in Apps and repo Links

NIP-82 software events (32267/3063) are attacker-published; their icon,
repository, website, and APK download url tags flowed raw into href/src.
Sanitize at the parse boundary (http/https only, no userinfo) so /apps,
profile Pages & Apps, and the catalog API are all covered. Repo sidebar
Links (30617) get the same guard at render in RepoLinks. Documented the
URL-attribute sink class in MARKDOWN_XSS.md; 56 unit tests green.
https://github.com/arbadacarbaYK/gittr/commit/32cee99444201122de4f1b8f222e059dcb7ee451

[ ATLBitLab/nostr-meetup ] Update README with project status and ...

2026-08-08T14:01:06Z

[ ATLBitLab/nostr-meetup ] Update README with project status and hackathon info

Added a note about the project's status and hackathon origin.
https://github.com/ATLBitLab/nostr-meetup/commit/7c0fcb4fe92f44e754da80703f3d8b66a99eff42

[ Lokuyow/ehagaki ] Merge pull request #82 from ...

2026-08-08T14:01:04Z

[ Lokuyow/ehagaki ] Merge pull request #82 from Lokuyow:chore--remove-unnecessary-peer-dependencies-from-package-lock.json

chore: remove unnecessary peer dependencies from package-lock.json
https://github.com/Lokuyow/ehagaki/commit/390e962db06d1dbb6483d0c5cbdfcdf0c87f1b75

[ ATLBitLab/abbot ] Mark project as archived and not actively ...

2026-08-08T14:01:01Z

[ ATLBitLab/abbot ] Mark project as archived and not actively maintained

Added a note indicating that the project is archived and not actively maintained.
https://github.com/ATLBitLab/abbot/commit/0152f607ce7b698a5a1c38e7fd1935be5a259b68

[ OpenSats/website ] Blog post: Ongoing Exploits of Bitcoin ...

2026-08-08T14:00:54Z

[ OpenSats/website ] Blog post: Ongoing Exploits of Bitcoin Software (#910)

* feat(blog): add Ongoing Exploits of Bitcoin Open-Source Software post

* feat(blog): fill Ongoing Exploits post body

* chore(blog): add placeholder image for Ongoing Exploits post

* chore(blog): shorten Ongoing Exploits summary

https://github.com/OpenSats/website/commit/613e07cdeb98ad47807285a49b026662bc455b45

[ forgesworn/flock ] docs: dark prague demo plan, live-build ...

2026-08-08T12:01:13Z

[ forgesworn/flock ] docs: dark prague demo plan, live-build attestation gap, verify-apk basemap step
https://github.com/forgesworn/flock/commit/a85c1a773e139b67846d80baaf5c9dda8d2ef6d2

[ jongan69/opendating-mobile ] docs(release): prepare store ...

2026-08-08T12:01:11Z

[ jongan69/opendating-mobile ] docs(release): prepare store listing handoff
https://github.com/jongan69/opendating-mobile/commit/36f55fd43ae731151a1a04f8ff367df891e8c25d

[ arbadacarbaYK/gittr ] fix: homepage hydration mismatch for ...

2026-08-08T12:01:08Z

[ arbadacarbaYK/gittr ] fix: homepage hydration mismatch for logged-in users (React #418)

NostrContext restores pubkey from localStorage synchronously, so the first
client render was "logged in" while SSR was "logged out". On the homepage
that diverged in four places: the "Your recent activity" heading, the
activity feed filtered to the user's repos, owner status badges on recent
repo cards, and localStorage repo-flag merges into snapshot cards. All now
use a mounted-gated pubkey so first paint matches SSR, then personalize.

Also serve /sw.js with max-age=0 so service worker fixes propagate
https://github.com/arbadacarbaYK/gittr/commit/66ad3d6da4ab390f95e68f5a80fe4bb4423beb4f

[ arbadacarbaYK/gittr ] fix: stop treating relay.gittr.space as a ...

2026-08-08T09:01:12Z

[ arbadacarbaYK/gittr ] fix: stop treating relay.gittr.space as a push/git host

Pyramid relay hostname is for Nostr; bridge clones live on git.gittr.space. Drop relay from GRASP push allowlist and Git Server preference so sidebars stop advertising it as the git server.
https://github.com/arbadacarbaYK/gittr/commit/6f8e28177c064581941ce861abcfe2dcd1af115c

[ nostria-app/nostria ] feat: enhance event ingestion and ...

2026-08-08T09:01:07Z

[ nostria-app/nostria ] feat: enhance event ingestion and timeline management with relay-specific filtering
https://github.com/nostria-app/nostria/commit/f3b0528922c7aca7ef67b4558b8ca8a2afbe7e14

[ OpenSats/website ] Remove custom grant application spam filter ...

2026-08-08T09:01:04Z

[ OpenSats/website ] Remove custom grant application spam filter (#907)

fix: remove custom grant application spam filter

Honeypot and timing checks were silently rejecting real applications (autofill, clock skew). Drop them ahead of a proper captcha.
https://github.com/OpenSats/website/commit/c32312c309444d6f18f08daf955c9e7f536a954e

[ forgesworn/sapwood ] feat: 12/24-word choice and fuller game ...

2026-08-08T09:00:55Z

[ forgesworn/sapwood ] feat: 12/24-word choice and fuller game instructions for on-device generation

GENERATE_IDENTITY frames carry the word count; both create flows (first-run
wizard and the Identity panel picker) offer 12 words (128-bit) or 24 words
(256-bit). While the device runs, Sapwood now shows the full step-by-step
instructions the small OLED can't: how the entropy game plays, how to skip
it, and the phrase write-down steps.
https://github.com/forgesworn/sapwood/commit/091c6ae2ec153490aef9ee3cd7100d16b2f47d3f

[ zapcooking/frontend ] Merge pull request #620 from ...

2026-08-07T01:01:27Z

[ zapcooking/frontend ] Merge pull request #620 from zapcooking/fix/extract-recipe-error-taxonomy

fix(extract-recipe): typed error taxonomy with client-owned copy
https://github.com/zapcooking/frontend/commit/88998b24006aad68e0df8846637db988409f62ae

[ loblawbob873-svg/posterchanai ] meme: talk keeps an erase via ...

2026-08-06T21:01:21Z

[ loblawbob873-svg/posterchanai ] meme: talk keeps an erase via the layer mask, not a transparent clip

The previous fix baked the erase into the talk INPUT, so add_talk emitted a
VP9-alpha WebM. That composites correctly on export but a Firefox <video>
renders VP9 alpha as a solid BLACK rectangle, hiding the layer beneath it —
"the layer below no longer shows" on two stacked erased duplicates.

Feed talk the OPAQUE original instead and KEEP the erase as the layer's mask.
add_talk renders every frame at the source's own size (base.copy(), aspect
preserved), so the still's mask still lines up with the clip. The layer is now
https://github.com/loblawbob873-svg/posterchanai/commit/0481716b7f330f1daaf7f9f6aa18468f800251f4

[ zoreu/tribe ] add spam filter ...

2026-08-06T21:01:19Z

[ zoreu/tribe ] add spam filter
https://github.com/zoreu/tribe/commit/0317e588859fb264b296661075acf1921ee287dc

[ Chewerphalguna599/genesis-mind ] Update README.md ...

2026-08-06T21:01:17Z

[ Chewerphalguna599/genesis-mind ] Update README.md
https://github.com/Chewerphalguna599/genesis-mind/commit/3a641526482a7409c252faeb5fa2a6e9bd1c03b5

[ vitorpamplona/amethyst ] Merge pull request #3871 from ...

2026-08-06T21:01:14Z

[ vitorpamplona/amethyst ] Merge pull request #3871 from vitorpamplona/negentropy-window-sizing

negentropy: size reconcile windows from the caller's index, and state the relay's cap
https://github.com/vitorpamplona/amethyst/commit/7caf4a8a25ee74b45fa231c5fce753d05c472ca5

[ radrootslabs/lib ] studio: support foreign executor polling - ...

2026-08-06T21:01:11Z

[ radrootslabs/lib ] studio: support foreign executor polling

- retain the owning Tokio handle on each runtime actor
- construct command and shutdown timers in the owning runtime
- keep foreign UniFFI executors outside Tokio context safe
- cover bootstrap and close through a non-Tokio poller
https://github.com/radrootslabs/lib/commit/09065a610d95e57acdc895a14c07580fa099e7c3

[ ptrio42/nostrich-love ] fix(tools): frame the key generator as ...

2026-08-06T21:01:09Z

[ ptrio42/nostrich-love ] fix(tools): frame the key generator as a demonstration, not an account factory

The page told readers to "generate a Nostr identity — an npub + nsec key pair —
right here in your browser", and its FAQ answered "Is it safe to generate keys
in a browser?" with "Yes, for getting started". Meanwhile
/guides/keys-and-security and the Nostr long-form articles tell the same reader
to let a signer hold the key and never paste an nsec into a web app. The site
was contradicting itself, and this page was the louder voice — it is the one
that ranks for tool-intent queries.

https://github.com/ptrio42/nostrich-love/commit/1661259916ce632aa978a908517a2ad167b90709

[ HiveTalk/swarm ] Merge pull request #15 from ...

2026-08-06T21:01:07Z

[ HiveTalk/swarm ] Merge pull request #15 from HiveTalk/dependabot/go_modules/go_modules-57bd245098

Bump golang.org/x/net from 0.38.0 to 0.55.0 in the go_modules group across 1 directory
https://github.com/HiveTalk/swarm/commit/2d66a2667d8927eb39194cd41df2824c94700816

[ forgesworn/sapwood ] fix: never offer a firmware downgrade as ...

2026-08-06T21:00:59Z

[ forgesworn/sapwood ] fix: never offer a firmware downgrade as an update

The update nudge and the OTA panel both compared versions with a plain string
inequality, which fires in EITHER direction. A signer running firmware newer
than the bundled manifest — a locally built image, or simply a manifest lagging
a release — was told an update was available and offered the older build.
Installing it silently reverts whatever the newer one fixed, which is exactly
the wrong outcome when the newer build carries a crash fix.

compareVersions/isUpgrade compare numerically per component, so 0.10.0 beats
https://github.com/forgesworn/sapwood/commit/2686d96ee4071655040deeabc7c9e3eb2313ea33

[ radrootslabs/lib ] mobile: canonicalize wasm export identity - ...

2026-08-06T20:01:45Z

[ radrootslabs/lib ] mobile: canonicalize wasm export identity

- rename the wasm build-info export to the canonical mobile name
- remove the legacy field marker from coverage probes
- update focused tests to assert only canonical identifiers
- preserve runtime payload behavior across the breaking rename
https://github.com/radrootslabs/lib/commit/5c13921aae0899ad2e33aa82dc6c2dcdf1aec84a

[ betonetojp/nokakoi ] fix: ...

2026-08-06T20:01:36Z

[ betonetojp/nokakoi ] fix: 定数最適化（フェッチ件数・タイムアウト）、Base64アバター表示およびイベント詳細での名前省略の改善

- EVENTS_FETCH_LIMITを30件に増加（追加読み込み回数の削減）
- RESUME_RESTART_MSを5分、KEEPALIVEを30秒、EVENTS_TIMEOUTを5秒に調整
- sanitizeUrlCandidate で改行含む safe data:image/ base64 URI を許可するよう拡張
- イベント詳細モーダルで displayNameWithUsername に { noTruncate: true } を指定
- イベント詳細のアバター名エリアに min-width: 0 を付与し、CSS省略（ellipsis）が効くよう改善
https://github.com/betonetojp/nokakoi/commit/454a50ee6fbe5b0dc69d5cd0adbbf3182a104ae1

[ athlon-misa/openfederation-pds ] feat(governance): verify ...

2026-08-06T20:01:33Z

[ athlon-misa/openfederation-pds ] feat(governance): verify offline that a decided change was legitimately applied (#218)

verifyDecision answers whether a decision was soundly reached, and ignores
objections on purpose: an objection contests the application, not the votes
cited, and treating one as a defect would make a sound decision verify as
unsound because someone disagreed. That left the other half unanswerable
offline — a decision can be sound and still have been applied a day early,
or applied over a hold that should have stopped it.

verifyApplication is the sibling that answers it, under the same constraints
https://github.com/athlon-misa/openfederation-pds/commit/9b4a95b7f4f0dcec24c9c0a5d7ab143bbd02130f

[ forgesworn/gopherkind ] Merge pull request #35 from ...

2026-08-06T20:01:31Z

[ forgesworn/gopherkind ] Merge pull request #35 from forgesworn/fix/signer-identity-guard

feat: refuse to sign as the wrong identity
https://github.com/forgesworn/gopherkind/commit/f2b2ec6946806315cb731e90b1fe3f6e05aa43e6

[ zapcooking/frontend ] Merge pull request #618 from ...

2026-08-05T22:01:19Z

[ zapcooking/frontend ] Merge pull request #618 from dmnyc/fix/post-engagement-drawer-layout

fix(posts): simplify engagement drawer layout
https://github.com/zapcooking/frontend/commit/5932a44594f931bd440e277ac3d6fef6d3502a26

[ papiche/UPassport ] refactor(templates/youtube.html): déplace ...

2026-08-05T22:01:17Z

[ papiche/UPassport ] refactor(templates/youtube.html): déplace la logique de connexion vers uplanet-header.js
https://github.com/papiche/UPassport/commit/e5c4fba7b583692a0e9ca3d2aef8793b889bebb9

[ vitorpamplona/amethyst ] Merge PR: ci: publish windows-arm64 ...

2026-08-05T22:01:15Z

[ vitorpamplona/amethyst ] Merge PR: ci: publish windows-arm64 desktop + windows amy/geode release assets

Merges nostr proposal 3ac62492 (v2) into main:
- ci: publish windows-arm64 desktop + windows amy/geode release assets
- ci(release): build windows-arm64 desktop as a portable zip only

Extends the release matrix to Windows on Arm using the free public-repo
windows-11-arm runner, and adds Windows legs (x64 + arm64) to build-cli and
build-geode. amyImage / geodeImage now emit both a POSIX launcher and a
.bat launcher so the flat image layout is uniform regardless of build host;
https://github.com/vitorpamplona/amethyst/commit/372964194d2b04badbcc35084bdcf40978d37121

[ arbadacarbaYK/gittr-mcp ] fix: prefer npub git.gittr.space ...

2026-08-05T22:01:14Z

[ arbadacarbaYK/gittr-mcp ] fix: prefer npub git.gittr.space clone URLs when resolving repos
https://github.com/arbadacarbaYK/gittr-mcp/commit/7db4f840cef3afe9fa3054d12830d4f1af828b8c

[ radrootslabs/lib ] test(storage): enforce release coverage ...

2026-08-05T22:01:12Z

[ radrootslabs/lib ] test(storage): enforce release coverage gates
https://github.com/radrootslabs/lib/commit/f7f456d906d91aadbb9fac4850afaa8c5723c3e9

[ geyserfund/geyser-app ] Update contact email for reporting ...

2026-08-05T22:01:10Z

[ geyserfund/geyser-app ] Update contact email for reporting vulnerabilities
https://github.com/geyserfund/geyser-app/commit/54ba111980657b5319e6278cc4e12a7f13ea8eda

[ satoshidude/jointfactory.io ] Broadcast text states the credit ...

2026-08-05T22:01:09Z

[ satoshidude/jointfactory.io ] Broadcast text states the credit rule, not the best case

The draft promised every reader "3 rounds and 3 stars, managers at 21 sats
instead of 90". Rounds are credited per full quadrillion earned, capped at
three: five accounts get that, thirty-one get nothing. Same mistake the switch
screen made, and worse in a DM, because a player who reads it and then sees a
zero has been told something untrue by name.

It now states the rule, says plainly that most accounts are credited with
nothing, and says what that means — the first star comes from the first round
https://github.com/satoshidude/jointfactory.io/commit/4dfd3f00ba29184da8264c22a328789e588fd732

[ privkeyio/buzz-relay-startos ] Merge pull request #14 from ...

2026-08-05T21:01:26Z

[ privkeyio/buzz-relay-startos ] Merge pull request #14 from privkeyio/feature/startos-diagnostics-action

Add diagnostics action surfacing community connection state
https://github.com/privkeyio/buzz-relay-startos/commit/9cd9b03629048bf9907d5c4cf9e8e4bbf63b07a9

[ loblawbob873-svg/posterchanai ] composer: wire up Clean links, ...

2026-08-05T21:01:24Z

[ loblawbob873-svg/posterchanai ] composer: wire up Clean links, and three fixes it turned up alongside

The previous commit shipped urlclean.js and its tests and NOTHING that calls
them — `git commit -F -` without -a takes only what is staged, and only the two
new files were. Inert rather than broken (no script tag, no menu item), but the
feature was not live. This is the rest of it, plus three separate reports.

🧹 Clean links, wired: the AI-menu item in both composers, the opt-in
"Remove link trackers when I post" setting, the publish-time hook on all four
post paths (inline, inline schedule, modal send, modal schedule), the script tag
https://github.com/loblawbob873-svg/posterchanai/commit/51e86d41aa9059ac0d65eb9e232faa2a6e28ad4f

[ ptrio42/nostrich-love ] Merge branch ...

2026-08-05T21:01:22Z

[ ptrio42/nostrich-love ] Merge branch 'seo/entity-and-linking'

Six commits from an SEO audit and a follow-up adversarial sweep. 118 files, +3257/−1330.

The audit's headline finding stands and is worth stating up front: **the real bottleneck is links and domain age**, not on-page work. First commit 2026-02-12, one directory listing and it carries `rel="nofollow"`. Nothing here manufactures authority — it makes the site legible to crawlers, fixes several things that were plainly broken, and removes the excuses. The distribution work is separate and mostly not code.

---

## 1. Entity graph, crawlable locale links, query-matched homepage (`5f37169`)

https://github.com/ptrio42/nostrich-love/commit/0cdf59a5417560ec3dd3adc1572d5ab033ec5988

[ trinidz/rssnotes ] new repo with dark mode ...

2026-08-05T21:01:20Z

[ trinidz/rssnotes ] new repo with dark mode
https://github.com/trinidz/rssnotes/commit/54024aacf0e47f47cf6305b02f830f89164f8231

[ vitorpamplona/amethyst ] Merge pull request #3867 from ...

2026-08-05T21:01:18Z

[ vitorpamplona/amethyst ] Merge pull request #3867 from vitorpamplona/l10n_crowdin_translations

New Crowdin Translations
https://github.com/vitorpamplona/amethyst/commit/fdbad9396fee9e5dbbe76c65520571e7b37cc1e3

[ athlon-misa/openfederation-pds ] Merge branch ...

2026-08-05T21:01:16Z

[ athlon-misa/openfederation-pds ] Merge branch 'security/hardening-batch'
https://github.com/athlon-misa/openfederation-pds/commit/e230d715a0a465b23c430d1054ffb227fb68a582

[ areebahmeddd/airhop ] feat: enhance NostrClient relay handling ...

2026-08-05T21:01:14Z

[ areebahmeddd/airhop ] feat: enhance NostrClient relay handling and settings

- Introduced tests for NostrClient relay targeting to ensure custom relays are contacted alongside geo-discovered relays.
- Updated geo-relay logic to maintain a consistent ceiling for custom relays, preventing silent drops when geo-relay discovery is enabled.
- Improved user interface in the Channel Info Sheet and Network Settings to display active relays, including custom ones.
- Added functionality to manage custom relay limits, ensuring users cannot exceed the maximum allowed.
- Enhanced localization strings for better clarity on relay functionalities and settings.
https://github.com/areebahmeddd/airhop/commit/e1f2e625a573446f9105e4217a4e40f05f2a834f

[ protolayer-io/choke ] Merge pull request #177 from ...

2026-08-05T21:01:12Z

[ protolayer-io/choke ] Merge pull request #177 from protolayer-io/docs/play-store-and-demo

docs: add Play Store badge and demo video
https://github.com/protolayer-io/choke/commit/c5af487e206810303cb85d7d49a819d9db1a4a1b

[ zig-nostr/website ] Use the right four shots on the signer page ...

2026-08-05T21:01:11Z

[ zig-nostr/website ] Use the right four shots on the signer page (#9)

The page carried four plain window captures. The set that was made for it
is the hero card and its three panels, each naming the claim the screen
underneath it proves. A picture of a window says what the app looks like;
these say what it is for.

The old four are gone rather than kept alongside, and the panels stack
below 640px: a 1000x1400 card at a third of a phone's width is
unreadable.
https://github.com/zig-nostr/website/commit/e42be4ffe89abd4f30595cba50e7dd60046f6ab2

[ zig-nostr/notary ] Use the right four shots (#40) The README ...

2026-08-05T21:01:09Z

[ zig-nostr/notary ] Use the right four shots (#40)

The README carried four plain window captures. The set that was made for
it is the hero card and its three panels, each naming the claim the screen
underneath it proves: the key never arrives, one URL any client, nothing
signs quietly. A picture of a window says what the app looks like; these
say what it is for.

The old four are gone rather than kept alongside. Two sets of the same
screens is a reader wondering which one is current.
https://github.com/zig-nostr/notary/commit/92973bb93aff6b6de88996bfc50ab35977078781

[ immrdude/clawstr ] Update README.md ...

2026-08-05T21:01:07Z

[ immrdude/clawstr ] Update README.md
https://github.com/immrdude/clawstr/commit/6427aed56d523ef41033310b4573ffaf0289471b

[ rehansahab/Sparkle-Protocol ] Update README.md ...

2026-08-05T21:01:06Z

[ rehansahab/Sparkle-Protocol ] Update README.md
https://github.com/rehansahab/Sparkle-Protocol/commit/5bf8464da082aafdbb9fca7017f787f798271e10

[ shopstr-eng/shopstr ] Merge pull request #599 from ...

2026-08-05T21:01:04Z

[ shopstr-eng/shopstr ] Merge pull request #599 from arnavkirti/test/ui

test(gift-wrap): enhance mock implementations for gift wrapping functions
https://github.com/shopstr-eng/shopstr/commit/0d4171ec63f98f1a02116d6fa18fd5fbb65faf06

[ radrootslabs/lib ] docs: update README.md ...

2026-08-05T21:01:02Z

[ radrootslabs/lib ] docs: update README.md
https://github.com/radrootslabs/lib/commit/59dc0c7f517237f668b4ca1ede9d5cbc511d879d

[ geyserfund/geyser-app ] Create SECURITY.md with security policy ...

2026-08-05T21:00:59Z

[ geyserfund/geyser-app ] Create SECURITY.md with security policy details

Added a comprehensive security policy outlining reporting procedures, supported versions, and guidelines for responsible vulnerability research.
https://github.com/geyserfund/geyser-app/commit/60b39d832a153804bc5a52b55f5944bf6365227c

[ athlon-misa/openfederation-pds ] Merge branch ...

2026-08-05T20:01:10Z

[ athlon-misa/openfederation-pds ] Merge branch 'fix/list-records-reverse-pagination'
https://github.com/athlon-misa/openfederation-pds/commit/a1801eb1a85317e56331f5e6a2514102e01586fb

[ hoytech/strfry ] Merge pull request #250 from ...

2026-08-05T17:00:59Z

[ hoytech/strfry ] Merge pull request #250 from theAnuragMishra/extend-auth

Restricted reads
https://github.com/hoytech/strfry/commit/9acdaeb1f63919184ece5f2dd67af21f1ed62f1b

[ threenine/diogel ] chore(repo): update CODEOWNERS to include ...

2026-08-05T15:06:23Z

[ threenine/diogel ] chore(repo): update CODEOWNERS to include @garywoodfine
https://github.com/threenine/diogel/commit/c359b0e5ec8726f559632f9b24e7820e9dacd50c

[ zig-nostr/plaza ] The feed has no bottom (#152) Three hundred ...

2026-08-05T12:07:55Z

[ zig-nostr/plaza ] The feed has no bottom (#152)

Three hundred notes was the size of a fixed array, not a limit anything
about the rendering needed. The list is windowed, so what the feed holds
costs memory rather than frames, and a reader who paged to the end of
that array found the feed simply stopped.

The notes now live on the heap and the buffer doubles as the reader pages
down. It never shrinks: somebody who scrolled four thousand notes deep
will do it again next session, and handing the memory back only to ask
https://github.com/zig-nostr/plaza/commit/eca9d09ac776cde7fff6de9c2ecea0a1758646ee

[ nostrdevkit/nostr ] Release v0.45.0 Signed-off-by: Yuki ...

2026-08-05T12:07:23Z

[ nostrdevkit/nostr ] Release v0.45.0

Signed-off-by: Yuki Kishimoto <yukikishimoto@protonmail.com>
https://github.com/nostrdevkit/nostr/commit/9ad7b273e7f4c460d07feea0077b3a4491dcbc6a

[ nostrdevkit/nostr-sdk-ffi ] Remove `EventDeletionRequest` ...

2026-08-05T12:06:51Z

[ nostrdevkit/nostr-sdk-ffi ] Remove `EventDeletionRequest`

Signed-off-by: Yuki Kishimoto <yukikishimoto@protonmail.com>
https://github.com/nostrdevkit/nostr-sdk-ffi/commit/d49b9943e6101ab1ce2d07e1be41f96f6367bd48

[ satcodexyz/satcode ] feat: create static bounty listing view ...

2026-08-05T12:06:19Z

[ satcodexyz/satcode ] feat: create static bounty listing view (#18)
https://github.com/satcodexyz/satcode/commit/ae6cf150d1f2d4be767148f7408b4bf79f8626a7

[ formstr-hq/nostr-calendar ] ios bug (#210) ...

2026-08-05T12:05:47Z

[ formstr-hq/nostr-calendar ] ios bug (#210)
https://github.com/formstr-hq/nostr-calendar/commit/fec0ea0124ad959f27a5d1252d2c7c3e6b4fed5e

[ athlon-misa/openfederation-pds ] fix: require fresh confirmed ...

2026-08-05T12:05:15Z

[ athlon-misa/openfederation-pds ] fix: require fresh confirmed governance proofs (#186)
https://github.com/athlon-misa/openfederation-pds/commit/632b1c39b0500ba52960cb58142669552cb0ae34

[ Lokuyow/ehagaki ] Merge pull request #56 from ...

2026-08-05T12:04:43Z

[ Lokuyow/ehagaki ] Merge pull request #56 from Lokuyow:npm-audit-fix

Implement feature X to enhance user experience and optimize performance
https://github.com/Lokuyow/ehagaki/commit/565c6113e56d9920897a7152d37d2031a1bab24a

[ LNVPS/api ] docs(db): tunnel owners are customers, not LNVPS ...

2026-08-05T12:03:39Z

[ LNVPS/api ] docs(db): tunnel owners are customers, not LNVPS (#357)

The comments landed in #356 said LNVPS's own infrastructure owns some tunnels,
via an account representing us. That is wrong: `user_id` is always a real
customer account — the operator's merchant account for a marketplace node, the
requesting user for a BGP tunnel or a VPN. Tunnels in this table are sold to
somebody; LNVPS's internal plumbing is not modelled here.

The distinction matters because the wrong version implied a system account had
to exist before any BGP tunnel could be allocated, which would have been built.
https://github.com/LNVPS/api/commit/fb3a3566e02d0022842a6de55c09145e4ef79d18

[ v0l/nostrsearch ] Re-attach the graph store after resetting ...

2026-08-05T12:03:08Z

[ v0l/nostrsearch ] Re-attach the graph store after resetting analyses

Resetting an analysis replaces it with a default instance, and that discards
the shared GraphStore handle attached at startup. Nothing put it back, so
after `ingest --reindex` (which resets everything before replaying the
corpus) follow_graph logged

follow_graph has no graph store attached; call Registry::attach_all
(Registry::load does this) before observing - the follow graph will be empty

https://github.com/v0l/nostrsearch/commit/9db2218a7d769ed6894606d7546c70812de8f7cb

[ aljazceru/awesome-nostr ] Remove Related Resources section from ...

2026-08-05T12:02:04Z

[ aljazceru/awesome-nostr ] Remove Related Resources section from README

Removed the 'Related Resources' section from the README.
https://github.com/aljazceru/awesome-nostr/commit/d1b97c42549c057ed84b9cec131bbb9904af0cb2

[ ZeusLN/zeus ] Merge pull request #4337 from ...

2026-08-05T12:01:31Z

[ ZeusLN/zeus ] Merge pull request #4337 from kaloudis/ui/lnurl-pay-empty-amount

ui: LnurlPay: start amount empty instead of min sendable
https://github.com/ZeusLN/zeus/commit/3744800105d70d4124e332f0577ed3a826c528ca