agorise/morphit
agorise/morphit
Watch
1
0
Fork
You've already forked morphit
 0
Code Issues Pull requests Projects Releases 145 Packages Wiki Activity Actions
145 releases 145 tags
  • v1.12.17 7b75916864

    Morphit v1.12.17
    All checks were successful
    morphit-ci / Supply-chain audit gate (fail on new high/critical) (push) Successful in 20s
    Details
    morphit-ci / TypeScript typecheck (sweep all workspaces) (push) Successful in 48s
    Details
    morphit-ci / apps/web svelte-check (svelte-kit sync + svelte-aware tsc) (push) Successful in 45s
    Details
    morphit-ci / Integration tests (real Postgres 16) (push) Successful in 39s
    Details
    morphit-ci / ansible-lint (playbook quality gate) (push) Successful in 15s
    Details
    morphit-ci / Smoke suite (run-smokes.sh, triple-pulse) (push) Successful in 25m33s
    Details
    morphit-release / Build + publish release tarball (push) Successful in 33m56s
    Details
    Stable

    agorise released this 2026-08-24 22:33:59 +00:00 | 4 commits to main since this release

    Signed by agorise
    GPG key ID: 53524E1F1017EB9C

    Morphit v1.12.17

    Theme: the hidden-RPC directory is now live on the stats page — pin a node, everyone sees it, no release required.

    Changed

    The stats page's RPC list now reflects the on-chain directory, network-wide, automatically. Previously the hidden-service (Tor/I2P) nodes shown on the stats card came from a value baked into each indexer at startup, so a node pinned to the chain (morphit_rpc_v1) never appeared without a rebuild. Now every indexer serves its RPC list as its configured seed plus the live on-chain rpc_directory, re-derived per request (cached ~60s). The effect:

    • Pin a hidden node on-chain → it appears on every instance's stats page within the indexer's normal indexing lag, on the user's next visit. No per-operator action, no Morphit release.
    • Remove one → it drops off (the directory is latest-wins).
    • Clearnet nodes are unchanged (still hardcoded), still mixed in and sorted by latency.
    • Privacy is preserved: a tor-only instance still never probes clearnet nodes; hidden directory nodes are reached over Tor/I2P as before.

    This is the one-time wiring change. After this release, adding, updating, or removing hidden-RPC nodes is release-free forever.

    Fixed / Hardened

    • CI can no longer be tripped by a stray vendor/ folder. The offline-appliance build output (vendor/) is now git-ignored (root-anchored, so the real ops/ansible/roles/vendor is untouched), and the source-scan smoke skips broken symlinks instead of crashing on them.

    Notes

    • No database migration in this release.
    • Everything from v1.12.16 and earlier (the attack-resilience edge hardening, the incident runbook, the security-audit set, the CI supply-chain gate) is included.
    Downloads