From 3edef9cbdf9e5697cc096a936d2dba7407e88ed3 Mon Sep 17 00:00:00 2001
From: SkateSpots <skatespots>
Date: Sat, 31 Oct 2026 09:57:30 +0700
Subject: [PATCH] release: 1.7.63

---
 package-lock.json |  4 ++--
 package.json      |  2 +-
 release-notes.txt | 17 +++++++++++++++++
 3 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 7658bda..37d1f61 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "skate-spots",
-  "version": "1.7.62",
+  "version": "1.7.63",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "skate-spots",
-      "version": "1.7.62",
+      "version": "1.7.63",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@bitcoinerlab/secp256k1": "^1.2.0",
diff --git a/package.json b/package.json
index d1f3fd4..b6ac55c 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "skate-spots",
   "private": true,
-  "version": "1.7.62",
+  "version": "1.7.63",
   "license": "AGPL-3.0-only",
   "type": "module",
   "homepage": "https://skate-spots.org",
diff --git a/release-notes.txt b/release-notes.txt
index d171127..558bfaa 100644
--- a/release-notes.txt
+++ b/release-notes.txt
@@ -1,3 +1,20 @@
+🔒 Privacy, privacy, consistent merging
+- Relay results are now merged deterministically with a newest-event rule and a
+  stable event-id tie-break instead of “first relay wins”. Local deletion
+  tombstones are applied during the same merge, so a deleted item cannot flash
+  back because a different relay answered first.
+- Photo uploads are redrawn through a canvas before Blossom, stripping EXIF/GPS
+  metadata from decodable images. GIF and HEIC/HEIF still pass through as-is
+  because they need special handling.
+- Android cloud backup is disabled for the app: local keys, settings and pending
+  escrow state stay on the device and must be exported explicitly.
+- The OpenSats footer icon is now served locally, so opening the app does not
+  contact opensats.org just to render the footer.
+- Added a technical threat-model document and linked it from the trust page:
+  signed facts, no relay consensus, no delivery proof, no arbitration.
+
+---
+
 🧹 Small correctness pass
 - Unknown routes now return home with a real in-app link, so the native app no
   longer does a full page reload on a 404.