chore: release main

.release-please-manifest.json

@@ -1,6 +1,6 @@
 {
-    "apps/server": "3.0.0",
-    "packages/xml-rpc": "0.0.0",
-    "packages/core": "0.0.0",
-    "packages/express": "0.0.0"
+    "apps/server": "4.0.0",
+    "packages/xml-rpc": "1.0.0",
+    "packages/core": "1.0.0",
+    "packages/express": "1.0.0"
 }

apps/server/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## [4.0.0](https://github.com/rsscloud/rsscloud-server/compare/server-v3.0.0...server-v4.0.0) (2026-06-30)
+
+
+### ⚠ BREAKING CHANGES
+
+* **server:** apps/server no longer exposes the mocha test suite or its devDependencies. Anything that ran 'pnpm --filter @rsscloud/server run test' (none externally) must switch to 'pnpm --filter @rsscloud/e2e run e2e-test' inside the docker container, or 'pnpm test' at the root.
+* project restructured as pnpm monorepo
+
+### Features
+
+* add realtime log page and improved test infrastructure ([0e5ac48](https://github.com/rsscloud/rsscloud-server/commit/0e5ac485b9004fc20eab6ae1f56430c43b1b50a6))
+* convert to pnpm monorepo with server app ([a4e3d41](https://github.com/rsscloud/rsscloud-server/commit/a4e3d412d855cb26631accfc65898383eb7ea094))
+* distribute feed content to WebSub subscribers on fan-out ([9615369](https://github.com/rsscloud/rsscloud-server/commit/9615369ce4bd61cc5f6b168cb634a8517d8d0409))
+* honor WebSub lease requests, clamped to configured bounds ([7328aef](https://github.com/rsscloud/rsscloud-server/commit/7328aefdffc224eb0c117de55c2a980872bad04b))
+* **server:** mount the WebSub hub front door ([6f57343](https://github.com/rsscloud/rsscloud-server/commit/6f573432e6be554e19b810bb030ffe66975beb3b))
+* **server:** screen outbound fetches with the SSRF egress guard ([cc81ebe](https://github.com/rsscloud/rsscloud-server/commit/cc81ebe8a22e5e99359f5cf1a414e529e3b66033))
+* sign WebSub deliveries with X-Hub-Signature ([7f3349e](https://github.com/rsscloud/rsscloud-server/commit/7f3349e4dc26a0df882c358061e1364e74b7529b))
+
+
+### Bug Fixes
+
+* **server:** build @rsscloud/xml-rpc in the Docker image ([2321097](https://github.com/rsscloud/rsscloud-server/commit/232109723731553903f771c761bffcb1289de548))
+* **server:** normalize WEBSUB_PATH to a leading slash ([090db46](https://github.com/rsscloud/rsscloud-server/commit/090db46654ac7381ce0af37216b28a798ba51d31))
+* **server:** restore /docs and /LICENSE.md routes after monorepo split ([8b127de](https://github.com/rsscloud/rsscloud-server/commit/8b127ded6e45d33867b5a1d92f2619bd6d973fb1))
+* **server:** scope the SSRF allowlist to topic fetch, keep callbacks strict ([71241cb](https://github.com/rsscloud/rsscloud-server/commit/71241cbb8e1d269055eeeb1ecbb26f4479af28ac))
+* **server:** stop the stats label hardcoding "7 days" ([26e1d50](https://github.com/rsscloud/rsscloud-server/commit/26e1d5026330aaac3f1211983512210a5ef88815))
+
+
+### Code Refactoring
+
+* **server:** extract e2e test suite into apps/e2e ([7013512](https://github.com/rsscloud/rsscloud-server/commit/701351285a586db003d25388e7ba664f626e3c1c))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @rsscloud/core bumped to 1.0.0
+    * @rsscloud/express bumped to 1.0.0
+
 ## [3.0.0](https://github.com/rsscloud/rsscloud-server/compare/v2.4.0...v3.0.0) (2026-05-15)
 
 ### ⚠ BREAKING CHANGES

packages/core/CHANGELOG.md

@@ -0,0 +1,42 @@
+# Changelog
+
+## 1.0.0 (2026-06-30)
+
+
+### Features
+
+* accept WebSub-native publish to trigger fan-out ([8a81963](https://github.com/rsscloud/rsscloud-server/commit/8a819633fe46435539894875655c8c939c80ca3c))
+* add realtime log page and improved test infrastructure ([0e5ac48](https://github.com/rsscloud/rsscloud-server/commit/0e5ac485b9004fc20eab6ae1f56430c43b1b50a6))
+* **core:** add @rsscloud/core interface contracts ([3d46f8f](https://github.com/rsscloud/rsscloud-server/commit/3d46f8ff618c25271fb98a3cbf1a15fafc5d99ed))
+* **core:** add async-202 accept seam for WebSub subscriptions ([169b2d6](https://github.com/rsscloud/rsscloud-server/commit/169b2d6267284330635b4e472990f409f2d0825a))
+* **core:** add file-backed Store adapter ([2acf6b0](https://github.com/rsscloud/rsscloud-server/commit/2acf6b0eab24efd2834923f7354b09cee5f21ce3))
+* **core:** add REST front door dispatcher ([d20905a](https://github.com/rsscloud/rsscloud-server/commit/d20905aa227ac5343821db5fd29c4233bf8fcdf9))
+* **core:** add SSRF egress guard for outbound fetches ([0e57cf8](https://github.com/rsscloud/rsscloud-server/commit/0e57cf8ac113d61b45bf3b424fab9f109b2f2d33))
+* **core:** add xml-rpc rssCloud plugin and dispatcher ([7364a71](https://github.com/rsscloud/rsscloud-server/commit/7364a71ab79e5a696cfc1d7f5d8a10c4bc5aac23))
+* **core:** expose the change-window size on Stats ([2501d74](https://github.com/rsscloud/rsscloud-server/commit/2501d741bef5f76a31d8afeb705dfc41bcbada6a))
+* **core:** implement REST-capable rssCloud engine ([51273d2](https://github.com/rsscloud/rsscloud-server/commit/51273d2bfc8371b0b5828bc8b97273ef4d33d8fe))
+* **core:** parse and validate WebSub hub.* subscribe requests ([9435356](https://github.com/rsscloud/rsscloud-server/commit/9435356f3068abfea0e398ecf47239c5483171ef))
+* **core:** persist the domain model as a versioned v2 file format ([f678d2b](https://github.com/rsscloud/rsscloud-server/commit/f678d2ba7b19ca8ac8221e38b8c4c9fda94dd2fd))
+* **core:** verify WebSub subscriber intent with a challenge GET ([8789847](https://github.com/rsscloud/rsscloud-server/commit/878984793871923ca8436bd2b3b4e5703f0cf739))
+* distribute feed content to WebSub subscribers on fan-out ([9615369](https://github.com/rsscloud/rsscloud-server/commit/9615369ce4bd61cc5f6b168cb634a8517d8d0409))
+* honor WebSub lease requests, clamped to configured bounds ([7328aef](https://github.com/rsscloud/rsscloud-server/commit/7328aefdffc224eb0c117de55c2a980872bad04b))
+* intent-verify WebSub unsubscribe before removal ([70b7d65](https://github.com/rsscloud/rsscloud-server/commit/70b7d65871d947e2653ef9aa98bf2b28b716f2fe))
+* sign WebSub deliveries with X-Hub-Signature ([7f3349e](https://github.com/rsscloud/rsscloud-server/commit/7f3349e4dc26a0df882c358061e1364e74b7529b))
+* wire the WebSub subscribe front door (core dispatcher + express) ([c15c0ea](https://github.com/rsscloud/rsscloud-server/commit/c15c0ead8429315a705e77caa460a35c79e7bb9b))
+
+
+### Bug Fixes
+
+* **core:** absorb synchronous throws in the verification scheduler ([aa46dcb](https://github.com/rsscloud/rsscloud-server/commit/aa46dcbb7b123890d11d78daa717a9097c21f002))
+* **core:** bound rssCloud REST notify redirects to prevent loops ([c08b174](https://github.com/rsscloud/rsscloud-server/commit/c08b1742eeaa8a2c493a11a283d9492826926c59))
+* **core:** bound WebSub delivery redirects to prevent loops ([703b2fd](https://github.com/rsscloud/rsscloud-server/commit/703b2fdd95a06c755c7faf54d8a7c4b20b9a7222))
+* **core:** fail WebSub delivery when the hub URL is unconfigured ([ce1c4c7](https://github.com/rsscloud/rsscloud-server/commit/ce1c4c725984b23de0a42c0055a7e2e94fd68453))
+* **core:** match dispatcher wire messages to the rssCloud contract ([bc87b3c](https://github.com/rsscloud/rsscloud-server/commit/bc87b3cade949be91035330da54e28b9d102af50))
+* **core:** reject non-URL hub.topic/hub.url with a synchronous 400 ([e43a7a4](https://github.com/rsscloud/rsscloud-server/commit/e43a7a4daf0292b2bb006f37e1b546b4044ba7b3))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @rsscloud/xml-rpc bumped to 1.0.0

packages/core/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rsscloud/core",
-    "version": "0.0.0",
+    "version": "1.0.0",
     "description": "Core primitives for rssCloud — subscriptions, notifications, and feed processing",
     "license": "MIT",
     "author": "Andrew Shell <andrew@andrewshell.org>",

packages/express/CHANGELOG.md

@@ -0,0 +1,19 @@
+# Changelog
+
+## 1.0.0 (2026-06-30)
+
+
+### Features
+
+* accept WebSub-native publish to trigger fan-out ([8a81963](https://github.com/rsscloud/rsscloud-server/commit/8a819633fe46435539894875655c8c939c80ca3c))
+* add realtime log page and improved test infrastructure ([0e5ac48](https://github.com/rsscloud/rsscloud-server/commit/0e5ac485b9004fc20eab6ae1f56430c43b1b50a6))
+* **express:** add Express middleware for the rssCloud front doors ([fb58c5a](https://github.com/rsscloud/rsscloud-server/commit/fb58c5a32fcce18eb066f7a8b0b88fd02c6757cb))
+* intent-verify WebSub unsubscribe before removal ([70b7d65](https://github.com/rsscloud/rsscloud-server/commit/70b7d65871d947e2653ef9aa98bf2b28b716f2fe))
+* wire the WebSub subscribe front door (core dispatcher + express) ([c15c0ea](https://github.com/rsscloud/rsscloud-server/commit/c15c0ead8429315a705e77caa460a35c79e7bb9b))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @rsscloud/core bumped to 1.0.0

packages/express/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rsscloud/express",
-    "version": "0.0.0",
+    "version": "1.0.0",
     "description": "Express middleware for the rssCloud notification protocol — pleaseNotify, ping, and RPC2 front doors",
     "license": "MIT",
     "author": "Andrew Shell <andrew@andrewshell.org>",

packages/xml-rpc/CHANGELOG.md

@@ -0,0 +1,10 @@
+# Changelog
+
+## 1.0.0 (2026-06-30)
+
+
+### Features
+
+* add realtime log page and improved test infrastructure ([0e5ac48](https://github.com/rsscloud/rsscloud-server/commit/0e5ac485b9004fc20eab6ae1f56430c43b1b50a6))
+* **xml-rpc:** add the methodCall decoder ([deff5a7](https://github.com/rsscloud/rsscloud-server/commit/deff5a7d973b80f1ba5849e062ac91fc268ab794))
+* **xml-rpc:** add the typed methodCall/response builder ([3478428](https://github.com/rsscloud/rsscloud-server/commit/347842810ee0eb7a61375fa968088b20acea9c49))

packages/xml-rpc/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rsscloud/xml-rpc",
-    "version": "0.0.0",
+    "version": "1.0.0",
     "description": "Generic XML-RPC codec for the rssCloud packages — parse and build methodCall/methodResponse documents",
     "license": "MIT",
     "author": "Andrew Shell <andrew@andrewshell.org>",