nostr-summary
Nostr Summary

https://github.com/SnowCait/nostr-summary

A bot that posts the latest commit from repositories tagged with the #nostr topic once an hour.

Public Key

npub10l479fv64qn03a3n0dqsryu74tyzl48xef0nc7u0z09q8tfx72ls7sv2ux

NIP-05 Address

Profile Code

nprofile1qqs8l6lz5kd2sfhc7cehksgpjw024jp06nnv5heu0w838jsr45n090cpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsr65qcw

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub10l479fv64qn03a3n0dqsryu74tyzl48xef0nc7u0z09q8tfx72ls7sv2ux

Show more details

Last Notes

2026-08-02 16:01:10 UTC

[ loblawbob873-svg/posterchanai ] sync.sh: stop silently skipping the main app on every deploy
`_restart_units` gated each unit on `systemctl cat "$u"`, which READS THE UNIT FILE as the
invoking user. /etc/systemd/system/posterchanai.service is mode 600 (every sibling unit is
644 — the restrictive mode looks accidental; its only Environment= lines are PATH and HOME,
identical to the 644 worker unit, so there is nothing in it to protect). `cat` therefore
returned "Permission denied", the loop read that as "this unit does not exist", and THE MAIN
APP was skipped — quietly — on every deploy that targeted it.
Caught it on the previous deploy: targets were worker+app, `[sync] restarting` printed for
https://github.com/loblawbob873-svg/posterchanai/commit/66b6fc5996537d3b42104caafd97eeb1deb03324

2026-08-02 16:01:08 UTC

[ CodyTseng/jumble ] chore(release): v26.8.1
https://github.com/CodyTseng/jumble/commit/24ccb2123ae2f8bf7683bba7e0d6c7538148a52a

2026-08-02 16:01:06 UTC

[ protolayer-io/choke ] Merge pull request #165 from protolayer-io/docs/announcement-channel-spec
docs: specify an authenticated announcement channel
https://github.com/protolayer-io/choke/commit/1678db8c9a84f081b5d753181bc9cdc51db1c1e5

2026-08-02 16:01:03 UTC

[ api-evangelist/nostr ] Kin Score 0.6 — provenance-graded rescore
Adds this provider's Kin Score artifact for rubric 0.6, the provenance release.
0.6 grades on WHO PUBLISHED an artifact, not merely that one exists. Where API
Evangelist authored an artifact on this provider's behalf — a modeled OpenAPI, a
candidate MCP server, generated agent skills, a derived agentic-access contract —
it now earns a quarter of the award rather than all of it. The artifact records
that authorship in its provenance block, so the number can be read with the
evidence behind it.
https://github.com/api-evangelist/nostr/commit/ecb946983b5f4c5b5a4ad921fd91064f3f544549

2026-08-02 16:00:58 UTC

[ Bitflash-sh/bitflash ] net: back to one accept thread until every relay takes more than one (#114)
#113 added three accept threads and called the extras harmless against an un-upgraded relay. They are not: an old relay closes the previous registration whenever the same node registers again, so the threads evict each other in a loop. Measured on the live network -- the node whose registrations landed on the un-upgraded New Jersey relay made 189 registrations in fifteen minutes with zero pairings, unreachable through it and hammering it, while the node on the upgraded relay made 9 with 7 pairings. One relay of three is upgraded, so this would hit two thirds of every node's registrations.
The relay half of #113 stays; it is compatible in both directions and is the prerequisite for raising this again, which the comment now states.
https://github.com/Bitflash-sh/bitflash/commit/daf2a5710381b0db727ad8e75eadae9cf8557caf

2026-08-02 14:01:08 UTC

[ zapcooking/frontend ] Merge pull request #611 from zapcooking/fix/bluesky-crawler-ua
fix(og): drop dead logo_with_text.png card tags on 4 routes; match Bluesky Cardyb
https://github.com/zapcooking/frontend/commit/3ff365ce07e6c95163cebcf29876300ef2df5768

2026-08-02 14:01:06 UTC

[ JSKitty/price-bot ] Move to Vector SDK 0.6
A clean upgrade: no source changes needed, tests green, and a live command
round-tripped through the XMR bot after deploy.
Worth noting for the next bump — this went 0.4 → 0.6 in one step and still
needed nothing, unlike Vector-LLM, which broke on the same jump. The
difference is that this bot only ever talks through the SDK, while that one
drops to the raw nostr-sdk client for the kind-1 firehose and so is exposed to
the 0.44 → 0.45 breakage underneath.
https://github.com/JSKitty/price-bot/commit/9bff1191eedeabd2fba990013a257d6b6fc9db45

2026-08-02 14:00:55 UTC

[ LNVPS/api ] perf(e2e): cut the suite from 17.6s to 11.7s by not sleeping through it
Profiling the suite showed test_full_lifecycle was 62% of the total
runtime, and almost all of that was idle waiting rather than work.
- poll_until now backs off from 25ms up to the caller's interval rather
than using it as a fixed cadence. Instrumenting the polls showed nine
of them succeeding on their first retry but each still paying a flat
500ms, ~4.6s of pure sleep. The deadline and early exit are unchanged,
so every call site keeps its failure semantics and worst case; it also
https://github.com/LNVPS/api/commit/541e8f315f2d8aeddcb6581b193c81b799d6aef5

2026-08-02 13:02:05 UTC

[ loblawbob873-svg/posterchanai ] fix
https://github.com/loblawbob873-svg/posterchanai/commit/fff62a5f0820ebdb4c045629f3fd9f6b45948cec

2026-08-02 13:02:02 UTC

[ haruki7049/nostr-unko-posting-bot ] Empty commit to run CI
https://github.com/haruki7049/nostr-unko-posting-bot/commit/e48418e596800e9d5569eae1937bb04117364ad3

2026-08-02 13:02:00 UTC

[ kehto/web ] fix(playground): clip topology connector paths (#231)
Co-authored-by: Codex <[email protected]>
https://github.com/kehto/web/commit/e9c907901fe455f6d3e66af20816cd820ed86db1

2026-08-02 13:01:58 UTC

[ besoeasy/gupt ] style(chat): pulsate empty-state message icon
Add a soft scale and glow loop on the empty chat icon container.
https://github.com/besoeasy/gupt/commit/10afca2090a50d9cfd058af905670bad5840efd5

2026-08-02 13:01:56 UTC

[ nogringo/nostr-mail-client ] feat(settings): add light and dark background presets
- Add three built-in background presets with light/dark variants
https://github.com/nogringo/nostr-mail-client/commit/42c45599b9d7012b288bc8d8a3aa009686ce4981

2026-08-02 13:01:52 UTC

[ LNVPS/api ] chore(deps): clear Dependabot advisories — drop serde_yml/libyml, bump quinn-proto
Resolves the three open Dependabot alerts:
- quinn-proto (high, GHSA-4w2j-m93h-cj5j): remote memory exhaustion from
unbounded out-of-order stream reassembly. Bumped 0.11.14 -> 0.11.16.
- libyml (high, GHSA-gfxp-f68g-8x78) and serde_yml (medium,
GHSA-hhw4-xg65-fp2x): unsound and unmaintained. Every published version
is affected, so there is no version to bump to — the fix is to stop
using them.
https://github.com/LNVPS/api/commit/8d2742c1f1327c7a6f4f0953a3e56e990f109854

2026-08-02 13:01:49 UTC

[ nostrdevkit/nostr ] database: remove `flatbuf` feature and migrate `flatbuffers` module to `nostr-lmdb`
This is part of the plan of reducing the API surface. This allows also more flexibility in the flatbuffers schema, in case the nostr-lmdb implementation needs non-standard fields or structs.
Signed-off-by: Yuki Kishimoto <[email protected]>
https://github.com/nostrdevkit/nostr/commit/b4d0360747c263c42a555eb314a57b2a1c712b9e

2026-08-02 13:00:55 UTC

[ jim-ww/charshare ] make importing chat optional when importing character from other site
https://github.com/jim-ww/charshare/commit/ccd89bc259bf214e978f0bfbbf4282602334be9b

2026-08-02 11:00:59 UTC

[ satoshidude/jointfactory.io ] Record what players buy, and read it back
The event log covered everything the server does — tickets, speed, boosts,
deposits, draws — and missed the largest joints sink in the game. Plot levels,
courier and factory capacity and plantation unlocks are bought in the client; the
server only ever saw the resulting state, so no later analysis could say what
people actually spend on.
It sees them now: progressBreakdown() already prices the difference between two
saves for the guard, so the same walk itemises it — how many levels, at what
https://github.com/satoshidude/jointfactory.io/commit/695c61ccdeb047d3bbe67cfd5e4b4903e41fbfc0

2026-08-02 11:00:54 UTC

[ nostrdevkit/nostr ] sdk: bound local relay subscription IDs
Subscription ID limits counted Unicode scalar values and were not applied to NEG-OPEN, allowing multibyte IDs to retain more memory than configured. Enforce the limit in UTF-8 bytes for both regular and negentropy subscriptions.
Signed-off-by: Yuki Kishimoto <[email protected]>
https://github.com/nostrdevkit/nostr/commit/75541f4032cb15459f14f91d27cf650c3bffc684

2026-08-02 09:03:37 UTC

[ Trustroots/nostroots ] Update web hub cards and retire Wikistr
Hide Trustroots.org and Nostroots Web cards inside the Nostroots app, promote Trustroots Wiki, Nomadwiki, and Trashwiki out of the experimental tier, and show the page build timestamp in shared footers.
Remove the obsolete Wikistr app, tests, configuration, documentation, and baseline capability requirements.
https://github.com/Trustroots/nostroots/commit/e9aa54b6d7ab7bbe3b6491a0e57fe813eba546a7

2026-08-02 09:03:05 UTC

[ spacecowboy/Feeder ] feat: added audio player for media attachments (#1172)
* feat: added podcast link detection
Detects playable podcast URLs locally before routing article links out to the browser. Adds focused unit coverage for extension-based and enclosure MIME-based matches.
Signed-off-by: Anubhav Choudhary <[email protected]>
* feat: added app-scoped podcast playback state
https://github.com/spacecowboy/Feeder/commit/ae132fbfbc39304aaac25dd48bbc6c77faba40d8

2026-08-02 08:02:33 UTC

[ bryanmatthewsimonson/xray ] Merge pull request #272 from bryanmatthewsimonson/claude/local-transcription-diarization
feat(capture): local YouTube transcription with speaker diarization
https://github.com/bryanmatthewsimonson/xray/commit/09322284a9217849e0b8358b82c8a72a9f4385cd

2026-08-02 08:02:00 UTC

[ flox1an/nostube ] fix: prevent unsafe origin links
https://github.com/flox1an/nostube/commit/718e763c499264941043e43b96445ecf1f9170e8

2026-08-02 08:01:28 UTC

[ TsukemonoGit/lumilumi ] Merge pull request #1085 from TsukemonoGit/dev
らいぶらりあぷで
https://github.com/TsukemonoGit/lumilumi/commit/9b6b9a1e81f68183051edbe53926878e30a600b3

2026-08-02 08:00:54 UTC

[ TsukemonoGit/nostr-content-parser ] Merge pull request #9 from TsukemonoGit/dev
fix url parse
https://github.com/TsukemonoGit/nostr-content-parser/commit/45e92ea6dc0f617f9caf5afe3a8c83e07958154c

2026-08-02 07:01:03 UTC

[ flox1an/nostube ] fix: cap comment image height
https://github.com/flox1an/nostube/commit/87ab57a9a8972b12ac948f6101ec99c2dd00d5aa

2026-08-02 07:01:01 UTC

[ permissionlesstech/bitchat ] Keyboard navigation for @-mention suggestions (#1542)
* Tab and arrow keys for mention autocomplete
Highlight the selected suggestion and let Tab accept it. Up/down move
the selection when the mention panel is open; Tab otherwise still
cycles focus.
Co-authored-by: Cursor <[email protected]>
https://github.com/permissionlesstech/bitchat/commit/1f59e814f90c3f489f48d68262cb1bf640bf6181

2026-08-02 07:00:59 UTC

[ loblawbob873-svg/posterchanai ] fix
https://github.com/loblawbob873-svg/posterchanai/commit/5c8dc198d529a0b9b78971fd0727b2d5de768e6c

2026-08-02 07:00:54 UTC

[ lawalletio/lawallet-nwc ] feat(listener): adopt shared vault secrets from Vercel (#132)
* feat(scripts): adopt shared secrets from the Vercel project
NWC_VAULT_SECRET and LISTENER_AUTH_SECRET must be byte-identical on web and
the listener — a mismatched vault key makes every encrypted RemoteWallet
undecryptable. Generating on the Fly side and copying by hand was the only
way to pair them, which is exactly the step that drifts.
--from-vercel now reads both from the same production environment it already
https://github.com/lawalletio/lawallet-nwc/commit/ed136981d1be1926014a508be045af3246466b00

2026-08-02 05:01:05 UTC

[ OpenSats/website ] Resign canary for August 2026 (#897)
chore(canary): resign for August 2026
https://github.com/OpenSats/website/commit/fcba7d781b691ca2f29f9d04fbbf6a76c85dbf9a

2026-08-02 05:00:54 UTC

[ coracle-social/welshman ] Optimize wot
https://github.com/coracle-social/welshman/commit/91f3b80d93a7c05fc588b49b31d90d8961868144

2026-08-02 02:01:07 UTC

[ imattau/write_nostr ] add adaptive-memory activation for personalized reading
- graph.ts: shared ActivationEngine + helpers (reinforceEvent, bumpEventAttention,
effectiveScore, topActivatedEvents, absorbSearch, spreadFromEvent); putEvents
preserves activation across re-adds and builds bidirectional tagged/authors/
mentions edges; pruneStaleCache spares activated nodes
- article view: read signal (25s dwell or 70% visible) durably reinforces;
similar articles re-ranked by spreading activation over topic edges
- interaction buttons: like/boost/zap reinforce on success
- semantic search: absorb() warms the query region and re-ranks results
https://github.com/imattau/write_nostr/commit/96df5d68ab9cc0d9e2ad26ff47b65fb7deaa591f

2026-08-02 02:01:05 UTC

[ zoreu/tribe ] tribe social projetct
https://github.com/zoreu/tribe/commit/bedb9eff79b4964a783e94adc2b7c159b3fbd100

2026-08-02 02:01:03 UTC

[ haruki7049/nostr-unko-posting-bot ] Empty commit to run CI
https://github.com/haruki7049/nostr-unko-posting-bot/commit/cff3f6d4e88c353b80452dc0d020631ccb77212b

2026-08-02 02:01:01 UTC

[ Bitflash-sh/bitflash ] docs: put the production numbers in the upgrade note (#107)
The deaf-node paragraph cited the bench A/B -- two nodes on one machine for half an hour. Both mining machines have since run 1.2.13 in production: zero spurious disconnections against the 741 the unpatched side logged, and 13 and 18 peers held where the unpatched node held 11, ten of them inbound. Also says what the pre-1.2.11 socket pile cost and what returns the ports.
https://github.com/Bitflash-sh/bitflash/commit/8327dde9ea8e518e2b0e2eae41809c9dbeb2396e

2026-08-02 02:00:59 UTC

[ vitorpamplona/amethyst ] Merge pull request #3846 from vitorpamplona/claude/30382-rank-follower-providers-j2cnb9
fix: request follower-count provider's 30382 cards in UserCardsSubAssembler
https://github.com/vitorpamplona/amethyst/commit/e10f76665fdbcd7573b9296f12149fdc7c349f59

2026-08-02 02:00:54 UTC

[ agent-awsome/relay-pulse ] Support watching multiple relays from one collector run
RELAYS_CONFIG points at a JSON list of relays; one run probes them all and
writes a single status.json, with the dashboard rendering a section per relay.
- per-relay history keyed by label, capped at HISTORY_MAX each
- the single-relay fields (relay/latest/history) stay at the top level mirroring
the first relay, so an existing status.json upgrades without losing its 24h
- per-relay "limit" caps how many events a probe pulls: this runs every 10 min,
and on a relay you do not operate that is someone else's disk. Hitting the cap
https://github.com/agent-awsome/relay-pulse/commit/c29e383583d5a96c4ea485c9ccf6f3cf1d93d957

2026-08-01 22:00:54 UTC

[ loblawbob873-svg/posterchanai ] talk: the mouth marker was placed in the wrong coordinate space on a tablet
The picker painted the marker from getBoundingClientRect() and read the drag
from it too. Those agree at zoom 1 and nowhere else: between 821px and 1920px
the app is scaled with body{zoom}, where a rect is a VIEWPORT pixel and a px
written to style.left is a LAYOUT pixel. So the pin landed at zoom x the
fraction it was given — at .67 it crawled to two-thirds of the picture and
stopped, leaving the right and bottom of the image unreachable, and a mouth
lined up by eye was recorded ~1.5x too far across and 1.5x too wide.
https://github.com/loblawbob873-svg/posterchanai/commit/5f675ba0c2a2cc75c705c6b0d8a93923452c005e

2026-08-01 19:01:12 UTC

[ sette7blo/workstr ] fix program tag denylist collision, temp sheet card and difficulty casing
https://github.com/sette7blo/workstr/commit/f67cf6a83e03916045a7c30bc8d774832de330a2

2026-08-01 19:01:08 UTC

[ koteitan/zundamstr ] v1.1.0/raise measured accuracy on unseen data from 84% to 89.3% over 9 rounds
- Route nd/yr, でしょう/だろう, ですけど/ですから through a conjugation-table
yogen test (isYogenEnd) instead of the YOGEN character class
- Open four classes previously left unconverted by design: request て-form
(→てほしいのだ), volitional, 様態のそう, and dialect や/にゃ/じゃ
- Generalize the polite-form reduction to relay any trailing particle instead
of enumerating 丁寧語+語尾 pairs one by one
- Recognise negation variants (ねえ, かもしれん, 小せえ, 〜くて) and 連用形名詞
as verbs by widening the stem tables and the E/A/U/O-row mappings
https://github.com/koteitan/zundamstr/commit/e9b5b300866c49af0fdb5af3373105d5524e19c6

2026-08-01 19:00:54 UTC

[ vitorpamplona/amethyst ] Merge pull request #3845 from vitorpamplona/claude/explained-filter-test-warnings-clpcv8
Test: Type ExplainedFilter.copy() result as base Filter
https://github.com/vitorpamplona/amethyst/commit/7922f9a4d1c99543df6cd31ebaf132465d5c836d

2026-08-01 18:01:17 UTC

[ saiy2k/nostr-components ] Pre-publish hardening: social proof, a11y, packaging, X-fetch (#104)
* Stop publishing insecure disabled-component APIs via zap imports and release artifacts.
Move normalizeURL into common, exclude comment/dm/live-chat from dts, and omit sourcemap sources/maps from the npm package so private-key helpers cannot leak through the release graph.
* Harden social proof and dialog a11y before publish.
- Validate zap receipts per NIP-57 Appendix F; fail closed without LNURL nostrPubkey
- Net like counts by pubkey (latest reaction wins) to stop spam inflation
https://github.com/saiy2k/nostr-components/commit/7da3b43c1eda80ec960f78f26b66399b042223b3

2026-08-01 18:01:11 UTC

[ Bitflash-sh/bitflash ] wallet: walk the chain for coins a key owns but the wallet never saw (#88)
A transaction only entered the wallet when its block arrived over the network,
so a key added afterwards was invisible: coins on the chain, private key in
wallet.dat, balance zero. /importwallet has always ended that way -- it writes
the keys and the money never shows up, which looks exactly like a failed import.
ScanForWalletTransactions walks the main chain and hands every transaction that
IsMine() to AddToWalletIfMine, the same two primitives the live path uses. Wired
into /importwallet, and offered as /rescan.
https://github.com/Bitflash-sh/bitflash/commit/0c80afca9b0e2145c905c1b6d4bd8d1304fbaa5b

2026-08-01 18:01:08 UTC

[ vitorpamplona/amethyst ] Merge pull request #3844 from vitorpamplona/claude/code-quality-class-decoupling-rrt199
refactor: decouple LocalCache and Account god classes (behavior-preserving)
https://github.com/vitorpamplona/amethyst/commit/31c3eaf2b34e565b815da57bcca9d71ccf6a92ec

2026-08-01 17:01:09 UTC

[ protolayer-io/choke ] Merge pull request #162 from protolayer-io/feat/home-match-share
feat: share a match from the home feed
https://github.com/protolayer-io/choke/commit/ddee43b8037d1a46e4466592a1fef8306949be99

2026-08-01 17:01:03 UTC

[ privkeyio/wisp ] Verify the Zig toolchain checksum and pin noz by commit (#162)
https://github.com/privkeyio/wisp/commit/d998a6a5b6a426e165e5818a9afdd114d76ddb47

2026-08-01 15:01:02 UTC

[ protolayer-io/choke ] Merge pull request #158 from protolayer-io/refactor/relay-probe-rust
refactor: move the Settings relay probe into the Rust crate
https://github.com/protolayer-io/choke/commit/7ed22bd0aa105e67bc387924b42c385cd1d786f2

2026-08-01 15:00:55 UTC

[ steve02081504/fount ] Add JSON editor aria labels, aria-ignore issue checks, and test hub (#272)
Co-authored-by: Taromati2 <[email protected]>
https://github.com/steve02081504/fount/commit/ca26e214069c608c30f28488a021f118fc312db4

2026-08-01 13:01:35 UTC

[ haruki7049/nostr-unko-posting-bot ] Empty commit to run CI
https://github.com/haruki7049/nostr-unko-posting-bot/commit/8329750ef5b8705f9e64ab74b44bf251dbdb10be

2026-08-01 13:01:33 UTC

2026-08-01 13:01:31 UTC

[ imattau/polypack ] build: coordinated version bump — 2.4.7 across the whole stack
Patch release for the new polypack-graph crate (a pure-Rust port of
PolyGraph's public API on polypack-core) and the clippy fixes that were
blocking CI. Nothing changed on the TS/native/Python side this round,
but versions are bumped in lockstep per this repo's convention.
Co-Authored-By: Claude Sonnet 5 <[email protected]>
https://github.com/imattau/polypack/commit/87c5b41f9cca46651409b9d1983f24f15d0642ec

2026-08-01 13:01:28 UTC

[ Lokuyow/ehagaki ] Optimize local post history deletion for single-pubkey data
https://github.com/Lokuyow/ehagaki/commit/41eb319ad8371d717e0b46d9e4abb058cf65a373

2026-08-01 13:00:54 UTC

[ WoompaLoompa/vendure-clink ] v0.3.0: rewrite BOLT11 decoder, add network/expiry validation and SSRF relay protection
- Rewrite decodeBolt11 with proper bech32 HRP/separator parsing
(extractPaymentHashFromBolt11/extractTimestampFromBolt11 now work on
valid invoices; verified against the official BOLT11 test vector)
- Add extractNetworkFromBolt11, extractExpiryFromBolt11
- Add network config option ('mainnet'|'testnet'|'regtest', default mainnet)
and validate invoices in both webhook and relay payment paths
- Reject expired invoices in webhook and relay paths
- Add isAllowedRelayUrl/filterAllowedRelayUrls SSRF protection applied to
https://github.com/WoompaLoompa/vendure-clink/commit/2fe734aa05f41a137481109b17847d46e7692573

2026-08-01 12:01:45 UTC

[ CodyTseng/jumble ] chore: update default relay lists
https://github.com/CodyTseng/jumble/commit/8c089e9f07c8cd76603ce79458c4bab058c78be6

2026-08-01 12:01:43 UTC

[ privkeyio/keep-esp32 ] Bump to v0.2.1 so a fixed build is identifiable (#145)
https://github.com/privkeyio/keep-esp32/commit/eda9537df429b2ec132b2d8b36ad3934047d2ca5

2026-08-01 12:01:41 UTC

[ nostr-jp/nips-ja ] Merge pull request #175 from nostr-jp/dependabot/npm_and_yarn/lint-staged-17.2.0
Bump lint-staged from 17.0.8 to 17.2.0
https://github.com/nostr-jp/nips-ja/commit/bb2c74732e190260b00a3c39b580f34f6f90ec7f

2026-08-01 12:01:39 UTC

[ hoornet/vega ] deps: fix 4 Dependabot alerts via lockfile bumps
- postcss 8.5.15 -> 8.5.25 (GHSA-r28c-9q8g-f849, high; build-time only via Vite)
- quinn-proto 0.11.14 -> 0.11.16 (GHSA-4w2j-m93h-cj5j, high; lockfile-only, never compiled)
- serde_with 3.18.0 -> 3.21.0 (GHSA-7gcf-g7xr-8hxj, medium; transitive via Tauri)
- dompurify 3.4.11 -> 3.4.12 (GHSA-c2j3-45gr-mqc4, low; CUSTOM_ELEMENT_HANDLING unused)
None practically exploitable in Vega. npm build + cargo check verified.
https://github.com/hoornet/vega/commit/ad4916b3527bf21d2225810fa406be55c195dcb1

2026-08-01 12:01:37 UTC

[ Lokuyow/ehagaki ] Add loading feedback and atomic local history deletion
https://github.com/Lokuyow/ehagaki/commit/905b160f98034210dc5d5d04f3a753e851b3e73d

2026-08-01 12:01:36 UTC

[ zig-nostr/plaza ] A queued note belongs to the account that wrote it (#86)
* A queued note belongs to the account that wrote it
Post a note that no relay takes, log out, and the queue keeps it. Sign in as
somebody else and the publisher walks it again: the previous account's unsent
writing goes out over the new account's relays, counted in their status bar as
something the app owed THEM.
The queue held sixteen entries of id, timestamps and ack bits, and no author at
https://github.com/zig-nostr/plaza/commit/a17c3aa52c5907eceb3867cb32912a780f3f3b11

2026-08-01 12:01:33 UTC

[ permissionlesstech/bitchat ] feat: share location channel invites via the system share sheet (#1513)
* feat: share location channel invites via the system share sheet
Adds text-first geohash invites (deep link + App Store URL) from
channel rows and the active-channel header, with an OpSec warning
for neighborhood-or-finer cells.
Closes #1497
https://github.com/permissionlesstech/bitchat/commit/681c1800602e8bafd6b76b6b3dcb4538e531d577

2026-08-01 12:00:59 UTC

[ soapbox-pub/ditto ] Exempt your own posts from content mutes
Muted words and hashtags no longer hide the current user's own posts.
Explicit pubkey and thread mutes still apply. Handled in useMuteFilter
so every feed, thread, and guard that routes through isMuted inherits
the behavior.
https://github.com/soapbox-pub/ditto/commit/c0961a05b7f34a3fad465d7854b675099bf06584

2026-08-01 11:01:16 UTC

[ soapbox-pub/ditto ] Hot-sort the Articles, Highlights, and Polls global tab
Add an opt-in `hotGlobal` flag, declared on the kind definition, so
KindFeedPage hot-sorts the Global tab (via `sort:hot`) instead of showing a
raw chronological feed. Enabled only on the kinds the relay ranks with a full
page of hot data — articles, highlights, and polls — to keep spam and
low-quality events out of easy view.
https://github.com/soapbox-pub/ditto/commit/d94a25c2a23d57a66231bd85b7e3399dcf5be9ac

2026-08-01 11:01:14 UTC

[ radrootslabs/lib ] secrets: complete package conformance coverage
- Add one shared capability and exact-selection contract for every built-in adapter.
- Enforce exact dependency sets, public traits, exports, and implementation isolation.
- Prove no-default, default, individual-feature, bundle, all-feature, docs, and wasm lanes.
- Make no_std tests import allocation types explicitly instead of relying on std.
https://github.com/radrootslabs/lib/commit/2dd2a8dc1e18f6f1b112be63f8519f529229669f

2026-08-01 11:01:12 UTC

[ CodyTseng/jumble ] feat: show pow badge on notes
https://github.com/CodyTseng/jumble/commit/5a6c01292a9dbabb55e0b33aae7508a4484f853f

2026-08-01 11:01:10 UTC

[ qyronx/fileblossom ] Update index.html
https://github.com/qyronx/fileblossom/commit/a6dc890e9dd833ad3db8b16b25557c98034ae977

2026-08-01 11:01:08 UTC

[ LNVPS/api ] docs(agent): document the in-API agent config; wire up standalone system-prompt
The `agent:` section served by lnvps_api had no example config, and
`system-prompt` was documented as an override when it is appended to the
built-in prompts in lnvps_agent/src/agent/prompts.rs.
- add a commented `agent:` block to lnvps_api/config.yaml
- add a "Live-chat support agent" section to docs/config.md
- lnvps_agent's own settings.system_prompt was parsed but never read; it is
now appended after the channel prompt in run_loop, matching lnvps_api
https://github.com/LNVPS/api/commit/3d2b1b6282dea9a5abab24d5fb57db90bb0e5a4b

2026-08-01 11:01:07 UTC

[ Lokuyow/ehagaki ] Show search loading state without clearing post history
https://github.com/Lokuyow/ehagaki/commit/c9435256f4d2c4457268c42e2e7a0732b893ca84

2026-08-01 11:01:04 UTC

[ steve02081504/fount ] Unify LF line endings, Python tab indentation, and YAML quote style (#271)
https://github.com/steve02081504/fount/commit/25944e691ca29b60a858ac63c08c8f09fe71d9a7

2026-08-01 11:01:01 UTC

[ vitorpamplona/amethyst ] Merge pull request #3839 from vitorpamplona/l10n_crowdin_translations
New Crowdin Translations
https://github.com/vitorpamplona/amethyst/commit/da009f36bde95d4c200c38e0de85b10e9ad75f8a

2026-08-01 11:00:55 UTC

[ agent-awsome/relay-pulse ] relay-pulse: zero-dependency Nostr relay status dashboard
Collector probes NIP-11 response time, 1h event throughput by kind, and EOSE
latency over WebSocket, then writes a status.json holding 24h of history.
The dashboard is a single static HTML file that renders it with hand-written
SVG sparklines. Node >= 22 only; no npm dependencies, no build step.
Extracted from the instance running for wss://nostr.inaridiy.com.
Co-Authored-By: Claude Opus 5 <[email protected]>
https://github.com/agent-awsome/relay-pulse/commit/690669d667d9e2e3c763f973ed6fd19d65150de1

2026-08-01 10:01:27 UTC

[ LNVPS/api ] feat(agent): live-chat support agent over a websocket (#350)
Adds `WebSocket /api/v1/support/chat`, a streaming conversation with the
AI support agent that runs in-process inside `lnvps_api`.
The existing `lnvps_agent` crate already had a working agent, but its only
abstraction was `SupportChannel` — a pull-based interface drained by a single
serial `run_loop`. That is right for an inbox or a relay subscription and wrong
for websockets: one customer's slow model response would block every other
session, and replies were only available as a finished blob. This adds a
https://github.com/LNVPS/api/commit/d18405432ec1893f48ad0bf5d0ce58408dc593c9

2026-08-01 10:01:25 UTC

[ soapbox-pub/ditto ] Split the sidebar Pages section into Yours and App
"Pages" was defined by what it wasn't — anything that isn't a content
type — so it collected three unrelated ideas: your data (Profile,
Bookmarks, Lists, Wallet, Notifications), ways to find things (Feed,
Search, Trends), and app meta (Settings, Help, Changelog). On a default
install the visible remainder read as a leftovers pile: Trends,
Bookmarks, Profile, Lists, Wallet, Changelog.
Pull the personal items into a Yours section and rename the rest to App.
https://github.com/soapbox-pub/ditto/commit/4a0a3224d45073dcfd542f7c238c083b6cadd0ab

2026-08-01 10:01:23 UTC

[ satoshidude/jointfactory.io ] Stop confiscating what players earn by hand
Watched boyscout buy a ticket — that worked, 417.9 T deducted, ticket in round
904, event logged. What the same log showed was a newcomer being clamped on
every single autosave, a few million joints at a time.
The save ceiling was measured against *automated* output. A player who has not
hired all three managers has a modelled rate of zero, so the ceiling was their
stored balance plus a flat 1000 — and everything they tapped for was clamped away
thirty seconds later. Precisely the players with the least patience for it.
https://github.com/satoshidude/jointfactory.io/commit/e2adbeaf46180c87ec4ab5f4f3f2bc7a5736a101

2026-08-01 10:01:21 UTC

[ vitorpamplona/amethyst ] fix: hoist the playback-error test fixtures out of composition
https://github.com/vitorpamplona/amethyst/commit/529c114802dc9ec1457105fd858876717b92042a

2026-08-01 10:01:20 UTC

[ imattau/polypack ] build: coordinated version bump — 2.4.6 across the whole stack
Patch release for the createVectorIndex type-compatibility fix, the
MemoryAdapter LRU eviction fix, and the documentation pass across
TS/Rust/Python.
Co-Authored-By: Claude Sonnet 5 <[email protected]>
https://github.com/imattau/polypack/commit/1273f96863a0ffeb60cb905c0ec35eaa1eb2aa49

2026-08-01 10:01:18 UTC

2026-08-01 10:01:16 UTC

[ CodyTseng/jumble ] fix: localize and align show less button
https://github.com/CodyTseng/jumble/commit/cc0b2c95fdc0bfa17dc84a8759cbb1024b7dfe8b

2026-08-01 10:01:14 UTC

[ syusui-s/rabbit ] fix: use import.meta.dirname instead of __dirname in vite/vitest config
https://github.com/syusui-s/rabbit/commit/3433147fd33d31d03e00ede103868a13d7f8221b

2026-08-01 10:00:55 UTC

[ Lokuyow/ehagaki ] Refactor post history interactions and simplify UI state
https://github.com/Lokuyow/ehagaki/commit/9af9e53c7cf0ce21c402922c26c8e3e0a53fea69

2026-08-01 07:01:11 UTC

[ arbadacarbaYK/gittr ] fix(nwc): support multi-relay Alby URIs and reject NWC on login
Parse all relay= from nostr+walletconnect strings and try them in order.
Show a clear error if an NWC URI is pasted into Pair Remote Signer.
https://github.com/arbadacarbaYK/gittr/commit/b9e118b62f8f8cea6f3c0fdedcc7707e82c6e2c7

2026-08-01 07:01:08 UTC

[ Lokuyow/ehagaki ] Optimize post history JSONL import batching and progress updates
https://github.com/Lokuyow/ehagaki/commit/c139db8c5716f434ff99652b5b5c31a49e4a009c

2026-08-01 07:00:57 UTC

[ imattau/polypack ] fix: satisfy clippy's unnecessary_map_or lint in edge index lookups
CI's `cargo clippy -- -D warnings` failed on get_edges_by_sources/
get_edges_by_targets: `edge_type.map_or(true, |t| ...)` is exactly
`Option::is_none_or`, which clippy now requires over the map_or form.
https://github.com/imattau/polypack/commit/41344fa68dcaa0b3247bf048b8501ea0f91cd7cc

2026-08-01 06:02:04 UTC

[ loblawbob873-svg/posterchanai ] talk: character poses (Jerry, Carl, …) can be made to talk
"Why can't I make Jerry talk? No option." Because the button only rendered for
IMAGE layers, and a Jerry effect layer is a video — the effect is rendered
server-side into a transparent clip, so by the time it is on the timeline nothing
about it says "jerry" any more.
A character POSE is a single drawing held on screen, which is exactly what the
lip-sync animates. So:
https://github.com/loblawbob873-svg/posterchanai/commit/706145601931ee98ae12918cd166aef50c8cb169

2026-08-01 06:01:32 UTC

[ vitorpamplona/amethyst ] Merge pull request #3838 from vitorpamplona/claude/nip42-auth-dm-delivery-test-fhn7fd
Fix InProcessWebSocket race condition in connect-time AUTH delivery
https://github.com/vitorpamplona/amethyst/commit/2741d32cfdea5be01a7a93aaf93ebf090bf1b18d

2026-08-01 06:00:58 UTC

[ Lokuyow/ehagaki ] Prevent stale search results from affecting post history
https://github.com/Lokuyow/ehagaki/commit/64e121c3a566bc88140e550f3ba5b7d3b029a936

2026-08-01 05:00:59 UTC

[ loblawbob873-svg/posterchanai ] talk: no more shadow ring around a redrawn anime mouth
"It puts an ugly shadow around the mouth." Two causes, both in the cover-up that
hides the artist's drawn mouth before the new one is painted on:
* it faded in with the opening, so it was never fully opaque -- a partial blend
of skin over the dark lip underneath, which is a muddy brown ring. The
dissolve was meant to avoid a pop, but this is a mouth SWAP, which is what
anime has always done frame to frame; there is nothing to dissolve.
* at wide openness the drawn cavity was WIDER than the cover, so the cavity's
https://github.com/loblawbob873-svg/posterchanai/commit/1f269d526770d48541967ed5a1e065c0a2e64395

2026-08-01 05:00:54 UTC

[ Lokuyow/ehagaki ] Preserve search results while loading older pages
https://github.com/Lokuyow/ehagaki/commit/fbe643adc16dce7367b343ab7c258012b353efc7

2026-08-01 02:01:05 UTC

[ privkeyio/keep ] Never let a degraded RNG path succeed quietly (#932)
* Stop the enclave RNG paths degrading without saying so
* Check the OS entropy source itself, not the mix that hides it
* Use bracket expressions so the guard regexes survive gawk
https://github.com/privkeyio/keep/commit/95e7626a49c6bfd34a7561bf08d6dd21fbfa8da3

2026-08-01 02:01:03 UTC

[ haruki7049/nostr-unko-posting-bot ] Empty commit to run CI
https://github.com/haruki7049/nostr-unko-posting-bot/commit/33841edb48621e467168147ea72a3a826c2903c9

2026-08-01 01:00:33 UTC

[ lawalletio/lawallet-nwc ] feat(proxy): harden deferred forwarding workflow (#129)
* feat(proxy): harden deferred forwarding workflow
* fix(docs): cover wallet proxy operations
https://github.com/lawalletio/lawallet-nwc/commit/b55ead49211cf9581febaea0a4854344b0dff91a

2026-08-01 01:00:31 UTC

[ imattau/polypack ] ci: use bash shell for native addon build step on Windows
windows-latest defaults to PowerShell, which doesn't understand the `\`
line-continuation in the multi-line napi build command, failing with
"Missing expression after unary operator '--'". Force shell: bash for
this step (Git Bash is preinstalled on GitHub's Windows runners).
https://github.com/imattau/polypack/commit/0d560ae5d1fbe836ca6a677facee7ee17b90613c

2026-08-01 01:00:29 UTC

[ zapcooking/frontend ] Merge pull request #609 from zapcooking/fix/membership-forced-refresh
fix(membership): force a membership refresh after payment completes
https://github.com/zapcooking/frontend/commit/3c6c164e6dd0d4cfbebdf3aaa6aed87f4c7428ed

2026-08-01 01:00:27 UTC

[ loblawbob873-svg/posterchanai ] notifications: videos that load forever, then "a display error"
Three videos in the Notifications tab kept restarting their load, never
painted a preview, and ended with "PosterChan hit a display error —
reloading". That toast is MainActivity's onRenderProcessGone(didCrash):
the WebView's render process had died outright.
A <video> with a src is not markup, it is a live decoder, and two things
were creating them without bound:
https://github.com/loblawbob873-svg/posterchanai/commit/396b33e86ddfa6aa28bba074287912b6c215422e

2026-08-01 01:00:24 UTC

[ ZeusLN/zeus ] Merge pull request #4249 from ZeusLN/dependabot/npm_and_yarn/react-native-documents/picker-12.0.1
chore(deps): bump @react-native-documents/picker from 11.0.3 to 12.0.2
https://github.com/ZeusLN/zeus/commit/818ab2eb873f4aa3d47dce4cc3c765c3956a8a1d

2026-07-31 22:00:24 UTC

[ Bitflash-sh/bitflash ] Remove two node binaries that should never have been committed (#79)
They came in with #78 and are build output, not source: 5 MB of Linux
binaries in a tree whose .gitignore already excludes the Windows zip and
the AppImage but had no pattern for the headless node. Adding one so the
next release cannot repeat it.
https://github.com/Bitflash-sh/bitflash/commit/521d76b1b866f0580ec5efe5ca9ecbb79dada5c1

2026-07-31 21:00:40 UTC

2026-07-31 21:00:38 UTC

[ protolayer-io/choke ] Merge pull request #153 from protolayer-io/refactor/drop-pubkey-alias
refactor: read a shared link's key from npub, and only npub
https://github.com/protolayer-io/choke/commit/d098440e578eaa6e44ba4ec3ac27b1d88304af92

2026-07-31 21:00:36 UTC

[ obelisk-app/obelisk-menhir ] Bump to v0.1.6
Channel types, replies, the emoji picker, the menu rework, hosting that
resumes by itself, and an app icon sized for the Dock.
Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
https://github.com/obelisk-app/obelisk-menhir/commit/fc3472fb993cdfc92cec671bfbbf08f0fd1b33c5

2026-07-31 21:00:34 UTC

[ formstr-hq/nostr-calendar ] Relay fetch fix (#207)
* relays calls fixed
* updated relay querying
https://github.com/formstr-hq/nostr-calendar/commit/9dbfc2e29886ea1a6568b46d00ffdf460ee762d6

2026-07-31 19:00:39 UTC

[ NostrGameEngine/nostr4j ] clean up TURN routing hash context
https://github.com/NostrGameEngine/nostr4j/commit/81e8bb81b2f568fa52f8231163ea235ee7ced0e3

2026-07-31 19:00:37 UTC

[ nogringo/nmail-api ] feat(push): accept unauthenticated disable
https://github.com/nogringo/nmail-api/commit/ebd75c5ba1b1f2352c8270f5dc3b44e5cbbeda43