Tags: audreyt/ethercalc

EtherCalc 0.20260717.0

EtherCalc v0.20260716.0

EtherCalc 0.20260710.1 — multi-sheet TOC text/csv POST fix

chore: release 0.20260710.0

Release 0.20260612.4 — SH-3, proxy TTL, Sandstorm SH-6/SH-7

- ETHERCALC_ROOM_CREATE_LIMIT per-IP cap on room-minting routes
- Proxy compose defaults: 30-day ETHERCALC_EXPIRE, room-create limit on
- Sandstorm: viewer role enforced via ETHERCALC_SANDSTORM; migrate token
  disarmed after first-load in run_grain.sh
- Helm config.roomCreateLimit wiring; sandstorm appVersion 202606124

Release 0.20260612.3 — astro 6 + hono security bumps

Bump docs to astro 6.4.6 and Starlight 0.40.0 (closes Dependabot
astro advisories). Bump worker hono to 4.12.25. Update Starlight
social config for v0.33+ array syntax.

chore: release 0.20260612.2

feat: oracle expansion, fill-down, multi-sheet fixes, Phase 12 sweep

Oracle harness: 22 recorded scenarios (room CRUD, csv/html export, form
redirect); structural HTML matcher; replay sorts by scenario catalog.

socialcalc 6ee504a (3.0.3): filldown/fillright increment fallback when
editor.range2 absent — fixes #314, #564, #769, #785.

client-multi: stable tab keys (#635), rowsRev iframe sync (#698), Foldr
link dedupe (#727); VITE_ETHERCALC_BASE for e2e dev wiring.

E2E: filldown persistence, form clone redirect, multi rename specs.

Nightly: oracle-replay job (legacy docker + worker) + staging dry-run.

Legacy sweep: remove src/*.ls, root app.js, old multi/, webpack Makefile
targets. Oracle docker still clones pinned pre-rewrite SHA.

Triage scripts + batch-close 29 verified-fixed issues.

Release 0.20260612.1

EtherCalc 0.20260611.1 — self-host hardening release

Supersedes 0.20260611.0 (crashed under plain docker run with an
anonymous volume). Room-index gate, nginx proxy recipe, non-root
workerd, keyless warnings, workerd null-binding fixes.

EtherCalc 0.20260611.0 — self-host hardening release

Room-index gate (ETHERCALC_DISABLE_ROOM_INDEX, default on for self-host),
nginx proxy recipe with WS timeouts, non-root workerd (setpriv drop /
Helm restricted securityContext + read-only rootfs), keyless startup
warnings, and the workerd null-binding fixes (GET / no longer redirects
to /null on docker compose).