github RoboSats/robosats v0.8.7-alpha
on GitHub

pre-release4 hours ago

RoboSats v0.8.7-alpha is now out! 🚀

Changes

What's new

TL;DR
Security hardening across the full stack, live coordinator ranking by DevFund donations, federation consensus mechanism, image upload in encrypted chat, 3 new payment methods, and new coordinators (Eleuteria, Freeport, Ammanaya).

For Users

  • New coordinators joined the federation: Eleuteria, Freeport, Ammanaya — FreedomSats removed
  • Image uploads in encrypted chat — User can now upload E2E encrypted images in the order chat via Blossom. Only available on coordinators that opt in.
  • Federation consensus mechanism, learn more here #2683
  • Live coordinator ranking — coordinators are now sorted by their actual real-time DevFund donation value (devfund% × fee rate), falling back to the static federation.json value when unreachable

New payment methods

  • eBay Gift Card
  • MobilePay
  • PYUSD

Bugs

  • Fixed PGP armor blank line being stripped when escaping robot key headers, which broke PGP verification
  • Fixed null premium default blocking order creation in the maker form
  • Fixed sensitive data exposure on password-protected orders — location and description are now redacted from non-participants; password-protected orders are also excluded from the public order book
  • Fixed Server-Side Request Forgery vector in the Android WebView interface
  • Fixed Redis 8.x channel layer timeout causing WebSocket disconnections

For Coordinators

  • Federation consensus mechanism, learn more here #2683
  • BLOSSOM_ENABLED — new opt-in env var to re-enable image uploads in chat (off by default); requires a Blossom blob server running behind the coordinator
  • STRFRY_HOST / STRFRY_PORT — new env vars for the embedded Nostr relay
  • DEVFUND is now exposed publicly via GET /api/info/ and used live by clients to weight coordinator lottery ranking — keep it accurate
  • Redis cache for public endpoints (/api/book/, /api/info/, etc.) — reduces DB load significantly under traffic
  • CLN pinned to v25.09.3 — holdinvoice v4.0.0 is incompatible with CLN v25.11+; do not upgrade CLN beyond v25.09.x until a compatible holdinvoice release exists
  • LND updated to v0.21 with HTLC_SET_ONLY lookup and /v2/router/send REST path fixes
  • GPG keys are now also purged when cleaning expired robot accounts
  • Fixed CSRF protection — DisableCSRFMiddleware replaced with the standard Django CsrfViewMiddleware (admin fully protected; DRF API views remain exempt via APIView)

Android

Click to download universal RoboSats APK for Android
Smaller bundles for each CPU architecture available in the attachments.

Verify the app using GPG:

  1. Download the ascii armored signature

  2. Run this command on a directory that contains the apk file and and the ascii armored signature.
    gpg --verify robosats-v0.8.7.alpha-universal.apk.asc

  3. Verify the signer is actually KoalaSat 8FCDBF574CCFD73DB68B00CC2F7F61C6146AB157

Additionally, you can download it from Izzysoft repository or ZapStore

Desktop

Download the Desktop App zip file
Find the zip file that suits with your operative system:

Verify the app using GPG:

  1. Download the ascii armored signature:

  1. Run this command on a directory that contains the apk file and and the ascii armored signature.
    gpg --verify robosats-v0.8.7.alpha-....asc

  2. Verify the signer is actually KoalaSat 8FCDBF574CCFD73DB68B00CC2F7F61C6146AB157

Docker Images

Coordinator Backend Image v0.8.7-alpha (Docker Hub) 

docker pull recksato/robosats:v0.8.7-alpha

Client App Image v0.8.7-alpha (Docker Hub) 

docker pull recksato/robosats-client:v0.8.7-alpha

See nodeapp/docker-compose.yml for an example docker-compose usage of the robosats-client image.

What's Changed

New Contributors

Full Changelog: v0.8.6-alpha...v0.8.7-alpha

Check out latest releases or
releases around RoboSats/robosats v0.8.7-alpha

Don't miss a new robosats release

NewReleases is sending notifications on new releases.

Get notifications