release: 1.7.73

This commit is contained in:
SkateSpots 2026-11-01 11:19:11 +07:00
parent 53380a99e1
commit 719a6791f9
3 changed files with 16 additions and 3 deletions

4
package-lock.json generated
View file

@ -1,12 +1,12 @@
{
"name": "skate-spots",
"version": "1.7.72",
"version": "1.7.73",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "skate-spots",
"version": "1.7.72",
"version": "1.7.73",
"license": "AGPL-3.0-only",
"dependencies": {
"@bitcoinerlab/secp256k1": "^1.2.0",

View file

@ -1,7 +1,7 @@
{
"name": "skate-spots",
"private": true,
"version": "1.7.72",
"version": "1.7.73",
"license": "AGPL-3.0-only",
"type": "module",
"homepage": "https://skate-spots.org",

View file

@ -1,3 +1,16 @@
🔑 Simpler sign-in choices
- The login dialog now shows two primary methods instead of three:
**Browser extension** and a platform-aware signer card.
- On Android the signer card is **Amber (NIP-55)**. On desktop it is
**Pair a signer** via NIP-46 QR.
- Removed the duplicate NIP-46 card. Desktop QR pairing now contains the
“Paste a bunker URI instead” path, with a back link.
- Amber users on Android get a direct “Use another signer (QR)” escape hatch.
- Fixed the QR button markup and clarified that QR pairing is for NIP-46
signers such as nsec.app/Nostrum; Amber is the one-tap Android path.
---
🛡️ Verify before showing, and stop leaking referrers
- The shared skate-content query path now verifies every relay event's id and
signature before merge/display. Trust-sensitive reads no longer rely on the