release: 1.7.8

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "skate-spots",
-  "version": "1.7.7",
+  "version": "1.7.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "skate-spots",
-      "version": "1.7.7",
+      "version": "1.7.8",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@bitcoinerlab/secp256k1": "^1.2.0",

package.json

@@ -1,7 +1,7 @@
 {
   "name": "skate-spots",
   "private": true,
-  "version": "1.7.7",
+  "version": "1.7.8",
   "license": "AGPL-3.0-only",
   "type": "module",
   "homepage": "https://skate-spots.org",

release-notes.txt

@@ -1,3 +1,17 @@
+🧑‍🤝‍🧑 Private chat: devices + members
+- Link a new phone or device with a QR code. An existing member scans it, and
+  the new device joins without another founder approval round trip.
+- Remove a member/device from the member list. Founders also get an Edit Crew
+  link for admin roles.
+- Copy or reply to any private-chat message.
+- The Private chat tab keeps its unread and join-request dots.
+
+🔐 Dependency hardening
+- Patched the critical protobufjs advisory used by the on-device translation
+  runtime and updated sharp. Only the write-only xlsx advisory remains.
+
+---
+
 💬 Private chat badges + remembered joins
 - The Private chat tab now shows a dot when new messages arrive while you’re
   reading Events or Chat; opening the tab clears it.