From b32bd69e4c13ded1fd02b08f4ee64dfa25327527 Mon Sep 17 00:00:00 2001
From: SkateSpots <skatespots>
Date: Wed, 28 Oct 2026 09:16:40 +0700
Subject: [PATCH] release: 1.7.8

---
 package-lock.json |  4 ++--
 package.json      |  2 +-
 release-notes.txt | 14 ++++++++++++++
 3 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 3eb22cc..869016b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "skate-spots",
-  "version": "1.7.7",
+  "version": "1.7.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "skate-spots",
-      "version": "1.7.7",
+      "version": "1.7.8",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@bitcoinerlab/secp256k1": "^1.2.0",
diff --git a/package.json b/package.json
index d6145bd..ad5e6ba 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "skate-spots",
   "private": true,
-  "version": "1.7.7",
+  "version": "1.7.8",
   "license": "AGPL-3.0-only",
   "type": "module",
   "homepage": "https://skate-spots.org",
diff --git a/release-notes.txt b/release-notes.txt
index acda29b..072dd5a 100644
--- a/release-notes.txt
+++ b/release-notes.txt
@@ -1,3 +1,17 @@
+🧑‍🤝‍🧑 Private chat: devices + members
+- Link a new phone or device with a QR code. An existing member scans it, and
+  the new device joins without another founder approval round trip.
+- Remove a member/device from the member list. Founders also get an Edit Crew
+  link for admin roles.
+- Copy or reply to any private-chat message.
+- The Private chat tab keeps its unread and join-request dots.
+
+🔐 Dependency hardening
+- Patched the critical protobufjs advisory used by the on-device translation
+  runtime and updated sharp. Only the write-only xlsx advisory remains.
+
+---
+
 💬 Private chat badges + remembered joins
 - The Private chat tab now shows a dot when new messages arrive while you’re
   reading Events or Chat; opening the tab clears it.