What's Changed

🚀 Features

• feat: derive config defaults from the JSON schema, add --write-config by @silverbucket in #1186

🐛 Bug Fixes

• ci: make verify-npm-publish.sh survive set -e on bash 5 by @silverbucket in #1184

🔨 Build & CI

• ci: build release Docker image from published npm packages by @silverbucket in #1182
• ci: deploy schema artifacts to sockethub.org on release by @silverbucket in #1187

Full Changelog: v5.0.0-alpha.15...v5.0.0-alpha.16

What's Changed

🚀 Features

• feat(platform-metadata): return the post's own media for X and Reddit URLs by @silverbucket in #1178

🐛 Bug Fixes

• fix(server): serialize platform replacement behind crashed instance teardown by @silverbucket in #1175
• fix(server): share and harden multi-origin CORS resolution by @silverbucket in #1179

Full Changelog: v5.0.0-alpha.14...v5.0.0-alpha.15

What's Changed

🚀 Features

• feat(server): add HTTP actions endpoint by @silverbucket in #1036

🐛 Bug Fixes

• fix(server): prevent crashed platform teardown from destroying its replacement by @silverbucket in #1167
• fix(data-layer): expire and tear down credential-store Redis keys by @silverbucket in #1171

📚 Documentation

• docs: align IRC room addressing with channel@server convention by @silverbucket in #1163

🧪 Tests

• ci: run integration tests nightly on master by @silverbucket in #1104
• ci: pass supported runtime to release-prepare test job by @silverbucket in #1172
• ci: restore release package-test gate and packaged-test config by @silverbucket in #1164
• ci: export SOCKETHUB_CONFIG so packaged tests work against older tags by @silverbucket in #1165

🧹 Maintenance

• chore(server): replace stale packageConfig comment with accurate doc by @silverbucket in #1168
• chore(server): upgrade to Express 5 and drop body-parser by @silverbucket in #1170

Full Changelog: v5.0.0-alpha.13...v5.0.0-alpha.14

What's Changed

💥 Breaking Changes

• refactor!: drop legacy platform field and string context routing by @silverbucket in #1068

🚀 Features

• feat(platform-irc): add SASL OAUTHBEARER token-based authentication by @silverbucket in #1055
• feat(platform-xmpp): Add token-based authentication option by @silverbucket in #1058
• feat(platform-xmpp): Add MUC room info query feature by @silverbucket in #916
• feat(schemas): outbound response-schema validation infra (warn-only) by @silverbucket in #1121
• feat: strict per-platform outbound responses schemas + enforce on send (#1120) by @silverbucket in #1122
• feat(server): dedup platform registry pushes by fingerprint (#1117) by @silverbucket in #1129
• feat(platform-feeds): strict fetch object schema with since/limit filtering by @silverbucket in #1134
• feat(platform-metadata): SSRF-guarded fetch via new @sockethub/util by @silverbucket in #1138
• feat(util): shared error helpers + guarded safeFetch by @silverbucket in #1140

🐛 Bug Fixes

• fix(platform-irc): Prevent unauthenticated IRC session sharing by @silverbucket in #1028
• fix(platform-irc): fix token default to PLAIN, enforce mechanism-secret pairing by @silverbucket in #1062
• test: fix credential defaults, tighten assertions, enable skipped test by @silverbucket in #1061
• fix(platform-xmpp): correct xmpp token auth compatibility and secret handling by @silverbucket in #1060
• fix(examples): use two-way binding for room prop by @silverbucket in #1065
• fix(data-layer): sanitize redis URL credentials before logging by @silverbucket in #1081
• fix(platform-xmpp): correct runtime bugs in incoming handlers, cleanup and credentials by @silverbucket in #1075
• fix(platform-irc): return success for /me and guard PING after cleanup by @silverbucket in #1076
• fix(platform-feeds): compare pubDate and date by value, not reference by @silverbucket in #1082
• fix(activity-streams): correct global ASFactory name and remove stray console.log by @silverbucket in #1078
• fix(schemas): remove duplicate PlatformSession interface declaration by @silverbucket in #1079
• fix(server): correct shutdown, init retry, sentry log order, type cast, and test assertions by @silverbucket in #1080
• fix(irc2as): correct test loop bound and emit ISO 8601 timestamps by @silverbucket in #1077
• fix(platform-xmpp): Attempt to properly determine actor type incoming updates by @silverbucket in #915
• fix(platform-xmpp): use unique IDs for attendance queries by @mvanhorn in #1107
• fix(server): skip delivery to disconnected sockets instead of error-spamming by @silverbucket in #1119
• fix(platform-metadata): strictly forbid inbound fetch object by @silverbucket in #1136
• fix(platform-feeds): reconcile outbound output with strict responses schema by @silverbucket in #1132
• fix(platform-feeds): harden makeRequest against HTTP errors, large bodies, and SSRF by @silverbucket in #1133
• fix(platform-irc): never send bare NAMES on attendance query by @silverbucket in #1141
• fix(util): use full-length hash for platform instance IDs by @silverbucket in #1154
• fix(server): cap concurrent platform instances by @silverbucket in #1155
• fix(server): collision-free job titles, expire orphaned handlers by @silverbucket in #1156
• fix(server): single process listener pair per platform instance by @silverbucket in #1157
• fix(server): configurable CORS origin, per-IP connection cap by @silverbucket in #1158
• fix(server): run janitor cycle in a loop instead of recursing by @silverbucket in #1159
• fix(platform-irc): explicit TLS cert validation + working self-signed opt-out by @mvanhorn in #1143

⚡ Performance

• perf(data-layer): parallel job processing for stateless platforms by @silverbucket in #1153

📚 Documentation

• docs: add AGENTS.md as canonical AI agent instructions by @silverbucket in #1066
• docs: move inline payload examples to package READMEs by @silverbucket in #1074
• chore: Node.js is the deployment runtime; Bun is dev-only tooling by @silverbucket in #1128
• docs: clarify client/server responsibilities, validation & replay by @silverbucket in #1130
• docs: add Cursor Cloud environment setup notes by @silverbucket in #1145

🧪 Tests

• test: add IRC integration test harness with Ergo docker by @silverbucket in #1057
• test: replace external irc.libera.chat with local ergo server by @silverbucket in #1084
• test(platform-feeds): add fixture matrix and harden buildFeedItem by @silverbucket in #1100
• ci: de-flake browser integration suite (metadata fixture, multiclient delivery barrier, contract job split) by @silverbucket in #1108
• test: start Ergo IRC server for the browser suite in npm-package test by @silverbucket in #1112
• test: await client connect+ready before sending credentials by @silverbucket in #1114

🔧 Refactoring

• refactor(platform-xmpp): convert source to TypeScript by @silverbucket in #1091
• refactor(activity-streams): remove object registry and move helpers to schemas by @silverbucket in #1088
• refactor(schemas): per-platform inbound object validation + remove dead activity-object path (#1123) by @silverbucket in #1124
• refactor: retire global object vocabulary + tighten base envelope (#1125, closes #1123) by @silverbucket in #1126
• refactor(platform-feeds): remove dead feedparser-era mapping by @silverbucket in #1135
• refactor(server): migrate config from nconf to convict by @silverbucket in #1137
• refactor(platform-feeds): use @sockethub/util guarded dispatcher by @silverbucket in #1139
• refactor: merge @sockethub/crypto into @sockethub/util by @silverbucket in #1142

🔨 Build & CI

• ci(examples): add smoke tests, contract checks, and nightly matrix by @silverbucket in #1098
• ci: repair test-npm-package local pack and test setup by @silverbucket in #1103
• ci: pin local @sockethub packages during test install by @silverbucket in #1105
• ci: simplify package verification by @silverbucket in #1106
• fix(platform-metadata): accept TLD-less hosts so localhost fixtures are fetchable by @silverbucket in #1111
• chore: use LOG_LEVEL (winston) everywhere, drop legacy DEBUG by @silverbucket in #1113
• ci: publish multi-arch ghcr.io image on release by @silverbucket in #1144
• ci: make failure-issue label creation idempotent, clarify NPM_TOKEN docs by @silverbucket in #1162

🧹 Maintenance

• chore: correct package metadata and a README typo by @silverbucket in #1083

🎨 Other Changes

• deps: bump socket.io to 4.8.3 and engine.io to 6.6.8 by @silverbucket in #1115
• fix(ci): use pull_request_target for auto-label so fork PRs get labeled by @silverbucket in #1160
• Release v5.0.0-alpha.13 by @github-actions[bot] in #1161

New Contributors

• @mvanhorn made their first contribution in #1107

Full Changelog: https://github.com/sockethub/sockethub/compare/v5.0.0...

What's Changed

💥 Breaking Changes

• feat(activity-streams)!: Remove legacy alias renaming in activity-streams by @silverbucket in #1039
• feat(schemas)!: Adopt canonical context schema registry and platform metadata by @silverbucket in #1045
• feat(server)!: Switch server routing to canonical @context arrays by @silverbucket in #1047
• feat(client)!: Add schema-driven initialization and contextFor() API by @silverbucket in #1048

🚀 Features

• feat: Add platform heartbeat and crash recovery tests by @silverbucket in #1029
• feat(irc2as): Allow injected legacy context in irc2as by @silverbucket in #1040
• feat(client): Improve docs with results activity by @silverbucket in #1044

🐛 Bug Fixes

• fix: Improve typing by @silverbucket in #1026
• fix(logger): Harden logger metadata serialization by @silverbucket in #1041
• fix(client): Fix activity-object-create ack error handling by @silverbucket in #1043

📚 Documentation

• docs(client): Add concise sockethub-client overview by @silverbucket in #1027
• docs: refresh readme and move dev commands by @silverbucket in #1030
• docs: Update documentation for @context routing and client ready() API by @silverbucket in #1050

🧪 Tests

• test: Make multiclient message wait deterministic by @silverbucket in #1025

🧹 Maintenance

• chore: Fix lint command resolution and unused import checks by @silverbucket in #1032

🎨 Other Changes

• deps: update dependencies by @silverbucket in #1031

Full Changelog: v5.0.0-alpha.11...v5.0.0-alpha.12

What's Changed

💥 Breaking Changes

• feat!: Migrate to Winston by @silverbucket in #1009

🚀 Features

• feat: Add rate limiting with backoff to incoming requests by @silverbucket in #1004
• feat(logger): Create @sockethub/logger package with self-contained logging by @silverbucket in #1014
• feat(logger): Add logging context for more clear log namespaces by @silverbucket in #1015
• feat(data-layer): Add Redis connection pooling and timeout configuration by @silverbucket in #1013
• fix(data-layer): Unify Redis IDs for queues, workers, and credentials by @silverbucket in #1016

🐛 Bug Fixes

• fix(server): improve handling of redis connection errors by @silverbucket in #1000
• fix(data-layer): Log Redis busy events rather than crashing by @silverbucket in #1003
• fix(client): Fixed replay() to skip ActivityStreams.Stream() for activity-objects by @silverbucket in #1006
• fix(crypto): Use SecureStoreRedis SecretValidator.generate() for all randToken() calls by @silverbucket in #1007
• fix(data-layer): Naming and improved testing by @silverbucket in #1017
• fix: Fix local pack script shell usage by @silverbucket in #1019

⚡ Performance

• test: Added stress, perf, soak testing process by @silverbucket in #999
• test: Stress tests and Sockethub resilience by @silverbucket in #1008

📚 Documentation

• docs: add SKILL.md for AI agent discoverability by @melvincarvalho in #1001 #1022

🧪 Tests

• test: Move Redis pooling tests to integration by @silverbucket in #1023

🎨 Other Changes

• deps(data-layer): Update code to comply with SecureStoreRedis 4 by @silverbucket in #1002

New Contributors

• @melvincarvalho made their first contribution in #1001

Full Changelog: v5.0.0-alpha.10...v5.0.0-alpha.11

What's Changed

🐛 Bug Fixes

• fix(client): Sockethub Client JS now exports in IIFE format for inclusion in the browser (Global var wasn't being exposed) by @silverbucket in #997

🔨 Build & CI

• ci: Fix flakey redis tests by @silverbucket in #996

Full Changelog: v5.0.0-alpha.9...v5.0.0-alpha.10

What's Changed

🔨 Build & CI

• ci: Fix workspace deps bumping during package build by @silverbucket in #994

Full Changelog: v5.0.0-alpha.8...v5.0.0-alpha.9

What's Changed

🔨 Build & CI

• build(server): Copy defaults.json during build process by @silverbucket in #991
• build(server): Include platform.js for node builds by @silverbucket in #992
• ci: Test sockethub npm package using integration tests by @silverbucket in #987

Full Changelog: v5.0.0-alpha.7...v5.0.0-alpha.8

What's Changed

🔨 Build & CI

• build: Provide TypeScript and JavaScript npm entry points for Bun or Node environments by @silverbucket in #986

🧹 Maintenance

• chore: bump minor deps by @silverbucket in #989

Full Changelog: v5.0.0-alpha.6...v5.0.0-alpha.7