diff --git a/package-lock.json b/package-lock.json index 39f9688..dc2402a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "skate-spots", - "version": "1.7.72", + "version": "1.7.73", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "skate-spots", - "version": "1.7.72", + "version": "1.7.73", "license": "AGPL-3.0-only", "dependencies": { "@bitcoinerlab/secp256k1": "^1.2.0", diff --git a/package.json b/package.json index dbdded9..2e5e60e 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "skate-spots", "private": true, - "version": "1.7.72", + "version": "1.7.73", "license": "AGPL-3.0-only", "type": "module", "homepage": "https://skate-spots.org", diff --git a/release-notes.txt b/release-notes.txt index 337edd8..bea62d0 100644 --- a/release-notes.txt +++ b/release-notes.txt @@ -1,3 +1,16 @@ +🔑 Simpler sign-in choices +- The login dialog now shows two primary methods instead of three: + **Browser extension** and a platform-aware signer card. +- On Android the signer card is **Amber (NIP-55)**. On desktop it is + **Pair a signer** via NIP-46 QR. +- Removed the duplicate NIP-46 card. Desktop QR pairing now contains the + “Paste a bunker URI instead” path, with a back link. +- Amber users on Android get a direct “Use another signer (QR)” escape hatch. +- Fixed the QR button markup and clarified that QR pairing is for NIP-46 + signers such as nsec.app/Nostrum; Amber is the one-tap Android path. + +--- + 🛡️ Verify before showing, and stop leaking referrers - The shared skate-content query path now verifies every relay event's id and signature before merge/display. Trust-sensitive reads no longer rely on the