2026-08-13 - 2026-11-13
Overview
41 Pull requests merged by 1 user
Merged
#64 hookshot: remove the Lidarr webhook
Merged
#63 docs: background web push is not planned (cinny #202)
Merged
#62 minecraft: show players online as the bridge bot's status
Merged
#61 cinny: point the status banner at Kuma's public page
Merged
#60 discord-bridge: Discord presence into Matrix ghosts
Merged
#59 feat(synapse): nightly state compression on CT 109
Merged
#58 docs: all 13 Hookshot webhooks rotated
Merged
#57 docs: call stack upgraded (lk-jwt-service 0.9.0, LiveKit 1.13.11)
Merged
#56 docs: note the 2026-11-03 webhook rotation
Merged
#55 docs: stop publishing Hookshot webhook IDs; record Hookshot + call-stack upgrades
Merged
#54 fix(livekit): graceful restart could restart LiveKit in the middle of a call
Merged
#53 voice-bridge: leave Discord within ~8-18 s of the last Matrix person leaving
Merged
#52 docs: voice bridge live — bot profile, room setup, upgrade steps
Merged
#51 voice-bridge: Discord voice ↔ Lotus voice room (patched nether-voicebridge) [awaiting go]
Merged
#50 docs: bot profiles (names, avatars, where each is set)
Merged
#49 docs: the Discord bot login stays on @jared
Merged
#48 discord-bridge: bot profile, down alert, login-owner account
Merged
#47 discord-bridge: Matrix avatars on Discord, catch up missed messages
Merged
#46 docs: Discord bridge is live; linking notes
Merged
#44 Add mautrix-discord bridge config and installer
Merged
#45 ci(pip-audit): audit on Python 3.13 instead of ignoring filelock CVEs
Merged
#43 docs: Synapse 1.164.1
Merged
#42 fix: explicit m.mentions for ticket notifications and roasts (ahead of Synapse 1.164)
Merged
#41 docs: Synapse 1.163.2 (Pillow 13 security update)
Merged
#40 fix(cinny-nginx): own rate budget for content-hashed app files
Merged
#39 feat(cinny-deploy): fail and alert when a deployed page references missing files
Merged
#38 fix(cinny-deploy): the call page's scripts are deployed again (regression from #30)
Merged
#37 feat(voice-limit-guard): enforce the limit at connect time too (#25)
Merged
#36 fix(cinny-web): per-client rate limits; own budget for decorations
Merged
#35 feat(cinny-web): serve avatar decorations from chat.lotusguild.org/decorations (#22)
Merged
#33 fix(voice-limit-guard): two simultaneous joins can no longer both pass a full room (#25)
Merged
#32 fix(cinny-web): CSP for mozilla.org discovery and TikTok oEmbed; featured communities (#18, #20, #21)
Merged
#31 docs(livekit): bind lk-jwt-service to 127.0.0.1:8071, not all interfaces (#24)
Merged
#30 fix(cinny-web): no-cache for the app shell on SPA routes; keep old hashed assets 14 days (#23)
Merged
#29 docs: registration is closed (SSO/LLDAP only); note Draupnir encryption status
Merged
#28 Revert Draupnir Rust crypto (#26): it fails to start without a device-bound token
Merged
#26 draupnir: enable Rust crypto so it can read commands in the encrypted management room
Merged
#27 landing: describe SSO sign-up, drop dashes and hyphens from the page text
Merged
#17 cinny config: status banner from the Kuma page (cinny #124)
Merged
#16 cinny CSP: allow the Kuma status page (cinny #124)
Merged
#15 LXC 106 deploy: merge config.json, self-update (#13)
17 Issues closed from 1 user
Closed
#8 Dedicated desktop-linux act_runner so Tauri builds stop queueing web CI/deploys
Closed
#7 Add Minecraft <-> Matrix chat bridge for the SMP
Closed
#25 Voice channel limit is only checked when a token is issued: two people joining at once both get in, and a token fetched early ignores the limit
Closed
#22 Avatar decorations are served through Nextcloud's public DAV: no Cache-Control and a new PHP session on every image
Closed
#24 lk-jwt-service listens on 0.0.0.0:8071, so anything on the LAN can mint LiveKit tokens directly and skip the voice-limit / audio-only guard
Closed
#19 Synapse: enable MSC3026 busy presence so Do Not Disturb can be a real presence state
Closed
#20 Web config: add the featured communities (Lotus Guild space, Homelab, Jellyfin, matrixrooms.info)
Closed
#18 Web CSP blocks the TikTok oEmbed lookup, so TikTok short links never play on chat.lotusguild.org
Closed
#21 Web CSP blocks mozilla.org's homeserver discovery, so the mozilla.org login option on chat.lotusguild.org always says "Failed to connect"
Closed
#23 chat.lotusguild.org serves the app shell for /, /home/… and /login/… without Cache-Control; deploys delete the old hashed assets
Closed
#13 LXC 106 (cinny) auto-deploy has not fired since 2026-05-15
Closed
#14 Branch protection on main requires a status check named "Lint" that never exists
Closed
#11 Landing page overhaul: replace the 4,000-word feature paragraph + duplicated comparison table with structured, single-source sections
Closed
#10 Verify the Gitea version honours workflow concurrency (confirm on a test burst)
Closed
#9 Debounce the desktop build trigger (tag / workflow_dispatch / schedule instead of every lotus commit)
Closed
#6 hottake grabs most recent emoji reaction even after unreacting.
Closed
#4 radarr unable to webhook to matrix`
14 Issues created by 0 users
Opened
#8 Dedicated desktop-linux act_runner so Tauri builds stop queueing web CI/deploys
Opened
#9 Debounce the desktop build trigger (tag / workflow_dispatch / schedule instead of every lotus commit)
Opened
#10 Verify the Gitea version honours workflow concurrency (confirm on a test burst)
Opened
#11 Landing page overhaul: replace the 4,000-word feature paragraph + duplicated comparison table with structured, single-source sections
Opened
#13 LXC 106 (cinny) auto-deploy has not fired since 2026-05-15
Opened
#14 Branch protection on main requires a status check named "Lint" that never exists
Opened
#18 Web CSP blocks the TikTok oEmbed lookup, so TikTok short links never play on chat.lotusguild.org
Opened
#19 Synapse: enable MSC3026 busy presence so Do Not Disturb can be a real presence state
Opened
#20 Web config: add the featured communities (Lotus Guild space, Homelab, Jellyfin, matrixrooms.info)
Opened
#21 Web CSP blocks mozilla.org's homeserver discovery, so the mozilla.org login option on chat.lotusguild.org always says "Failed to connect"
Opened
#22 Avatar decorations are served through Nextcloud's public DAV: no Cache-Control and a new PHP session on every image
Opened
#23 chat.lotusguild.org serves the app shell for /, /home/… and /login/… without Cache-Control; deploys delete the old hashed assets
Opened
#24 lk-jwt-service listens on 0.0.0.0:8071, so anything on the LAN can mint LiveKit tokens directly and skip the voice-limit / audio-only guard
Opened
#25 Voice channel limit is only checked when a token is issued: two people joining at once both get in, and a token fetched early ignores the limit