From 41f420ae55e6c52cab32503aaac2a76495d9e7e6 Mon Sep 17 00:00:00 2001
From: SkateSpots <skatespots>
Date: Thu, 29 Oct 2026 23:17:30 +0700
Subject: [PATCH] release: 1.7.38

---
 package-lock.json |  4 ++--
 package.json      |  2 +-
 release-notes.txt | 13 +++++++++++++
 3 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index b370b9c..4946794 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "skate-spots",
-  "version": "1.7.37",
+  "version": "1.7.38",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "skate-spots",
-      "version": "1.7.37",
+      "version": "1.7.38",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@bitcoinerlab/secp256k1": "^1.2.0",
diff --git a/package.json b/package.json
index d218ece..e58ab2a 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "skate-spots",
   "private": true,
-  "version": "1.7.37",
+  "version": "1.7.38",
   "license": "AGPL-3.0-only",
   "type": "module",
   "homepage": "https://skate-spots.org",
diff --git a/release-notes.txt b/release-notes.txt
index 392cfa9..a9c7486 100644
--- a/release-notes.txt
+++ b/release-notes.txt
@@ -1,3 +1,16 @@
+🔍 Audit pass: counts, forms, dependencies
+- Followers now query up to 500 follow lists instead of 100, so profile and
+  sponsor counts are less likely to undercount.
+- Clothing designers were missing from /stats and Supporters impact; they now
+  have their own count and card (15 Lab crafts total).
+- The floating Sasquatch bubble is hidden on /become forms, create/edit forms
+  and /supporters so it can't cover inputs or the grantmaker form.
+- protobufjs override moved to 7.6.5, clearing the moderate ONNX-path advisory.
+  The only remaining production advisory is xlsx (write-only export, no fix
+  published).
+
+---
+
 🛠 Cordn empty-response fix
 - The coordinator client now accepts both structuredContent and JSON text
   responses, and treats an empty list response as an empty list. This fixes the