• v1.0.0 028772db83

    v1.0.0
    Some checks failed
    Build and Release / test (push) Successful in 2m49s
    Build and Release / container (push) Successful in 3m14s
    Build and Release / prune (push) Failing after 46s
    Build and Release / semantic-release (push) Successful in 1m3s
    Stable

    rwxd released this 2026-10-24 11:55:06 +02:00 | 12 commits to main since this release

    1.0.0 (2026-10-24)

    Bug Fixes

    • auth: compare userinfo subject; docs: fix Docker volume permissions (a02a70b)
    • auth: honor PocketBase password-auth settings at runtime (00d0250)
    • auth: make OIDC discovery independent of a canceled login (f4bc027)
    • auth: preserve OAuth2 API signup while blocking public registration (e0ce072)
    • auth: reject sessions for unverified accounts (a9151d8)
    • auth: require verified accounts for PocketBase authentication (8019f54)
    • oauth2: prevent createData identity squatting and bound mail sends (b6fa5d4)
    • security: harden OIDC discovery, headers, origin checks and UI fallbacks (cf832d6)
    • security: lock down signup, serialize checks, and harden RDAP/OIDC (6b93200)
    • ui: clear stale list notices on add responses (38f330a)
    • ui: clear stale notices and require verified password accounts (892a1fc)
    • watchlist: only consume the daily retry after a completed check (a35b806)
    • watchlist: persist manual-check allowance atomically with the result (845c510)

    Code Refactoring

    • rename project to domainhawk (1b6de4d)

    Features

    • add WHOIS fallback and per-user watchlist limits (8ab55b9)
    • api: add never-expiring tokens and streamline docs (96a17ec)
    • api: add personal API tokens and watchlist API (237fc2c)
    • api: rate limit authenticated API requests (2ef3999)
    • api: support unlimited token lifetimes and refine docs (f3a1f8f)
    • auth: add account settings, registration, reset codes and help (6bffba0)
    • core: add config, domain validation, and RDAP availability checker (6dc58c3)
    • notifications: add SMTP email alerts, domain cache, and daily re-check limit (12a34d4)
    • observability: add structured logs and log level (63ec7b7)
    • ui: add hawk branding, docs pages, and fix watchlist dividers (911b43b)
    • watchlist: add domain search and public docs navigation (195c3de)
    • watchlist: add RDAP checks, scheduling, notifications, and HTMX UI (f42f0fc)

    BREAKING CHANGES

    • environment variables now use the DH_ prefix, session cookies and API token prefixes changed, and Docker volume names changed. The initial migration ID is kept intentionally so existing databases do not re-run the schema migration.
    Downloads