RoboSats v0.8.8-alpha is now out! 🚀
Changes
What's new
TL;DR
For Users
- New garage key introduced as a replacement of the robot key, more info: #2342
- Nostr encrypted chat is now enabled
- Alice and Eleuteria coordinators dropped the fedeation.
- Android app now embeds Tor via kmp-tor 2.6.0 (tor 0.4.9)
- Payout safety: reward sources and buyer payouts are verified against the Lightning node, with optional withdrawal limits
- Reward withdrawal UI now shows when withdrawals can be made again
- Multiple libraries security updates
New payment methods
- Efectivo BBVA
- BTCB2 (BTC B2 Swap)
Bugs
- Fixed race conditions in orders
- Fixed reward withdrawal duplicate invoice 500 error
- Fixed bond credit being applied more than once per slashed bond
- Fixed incomplete admin order cancel
- Fixed XSS: order logs are now stored as JSON and user-controlled data is properly escaped
- Fixed dispute order ID corruption
- Fixed admin trade resolution swap
- Fixed broken state after onchain admin resolution
- Fixed do_accounting crash on disputed swap orders
- Fixed null coordinator URL materialization
- Fixed federation order URL routing
- Fixed mempool Tor hang with hard deadline
- Fixed Criptoya exchange rate to use ask/bid midpoint
For Coordinators
- Payout safety checks added: optional
WITHDRAWAL_LIMITenv var to cap reward withdrawals - Django bumped to 5.2.18
- Pillow bumped to 13.0.0
- Multiple libraries security updates
- Coordinator onion addresses documented as fallback on the access page
- Coordinators can choose which % of federation's donations goes to community management
Android
Click to download universal RoboSats APK for Android
Smaller bundles for each CPU architecture available in the attachments.
Verify the app using GPG:
-
Run this command on a directory that contains the apk file and and the ascii armored signature.
gpg --verify robosats-v0.8.8.alpha-universal.apk.asc -
Verify the signer is actually KoalaSat 8FCDBF574CCFD73DB68B00CC2F7F61C6146AB157
Additionally, you can download it from Izzysoft repository or ZapStore
Desktop
Download the Desktop App zip file
Find the zip file that suits with your operative system:
Verify the app using GPG:
- Download the ascii armored signature:
-
Run this command on a directory that contains the apk file and and the ascii armored signature.
gpg --verify robosats-v0.8.8.alpha-....asc -
Verify the signer is actually KoalaSat 8FCDBF574CCFD73DB68B00CC2F7F61C6146AB157
Docker Images
Coordinator Backend Image v0.8.8-alpha (Docker Hub)
docker pull recksato/robosats:v0.8.8-alphaClient App Image v0.8.8-alpha (Docker Hub)
docker pull recksato/robosats-client:v0.8.8-alphaSee nodeapp/docker-compose.yml for an example docker-compose usage of the robosats-client image.
What's Changed
- Fix image upload errors not shown in chat by @gabbygator184 in #2719
- Eleuteria testnet4 in #2730
- Downgrade PGP by @KoalaSat in #2731
- Fix concensus race condition by @KoalaSat in #2734
- Fix GHSA-hp64-3gp5-v8fr by @KoalaSat in #2661
- Update devfund_pubkey.json by @KoalaSat in #2739
- chore(deps): apply safe dependabot upgrades by @KoalaSat in #2741
- Bump svgo from 3.3.4 to 3.3.5 in /frontend by @dependabot[bot] in #2735
- Bump js-yaml from 3.15.1 to 3.15.2 in /frontend by @dependabot[bot] in #2738
- Bump js-yaml from 4.3.1 to 4.3.2 by @dependabot[bot] in #2737
- fix: add hard deadline for mempool.space by @gabbygator184 in #2717
- fix: unify federation order URLs by @gabbygator184 in #2736
- fix: prevent null coordinator URL materialization by @gabbygator184 in #2740
- Bump the python-patch group across 1 directory with 8 updates by @dependabot[bot] in #2744
- Bump the frontend-security group across 1 directory with 13 updates by @dependabot[bot] in #2732
- Bump webpack 5.110 by @KoalaSat in #2745
- Bump @types/react-dom from 19.2.4 to 19.2.5 in /frontend by @dependabot[bot] in #2693
- Bump globals from 17.11.0 to 17.12.0 in /frontend by @dependabot[bot] in #2721
- Bump @types/node from 26.2.0 to 26.4.1 in /frontend by @dependabot[bot] in #2722
- Bump css-loader from 7.1.4 to 7.1.5 in /frontend by @dependabot[bot] in #2724
- Bump @typescript-eslint/parser from 8.67.0 to 8.69.0 in /frontend by @dependabot[bot] in #2727
- Bump jest from 30.4.2 to 30.5.1 in /frontend by @dependabot[bot] in #2723
- Remove fake testnet address by @KoalaSat in #2733
- Add efectivo bbva payment method by @KoalaSat in #2747
- fix: use ask/bid midpoint for Criptoya exchange rate median by @chandachewe10 in #2704
- fix: escape user-controlled data in order.log() and objects_to_hyperlinks() by @TempleOfSats in #2522
- Better .env-sample instructions by @KoalaSat in #2754
- TOCTOU improvements on active order by @KoalaSat in #2749
- Fix broken state after onchain admin resolution by @KoalaSat in #2751
- Check HOLD amount before accepting by @KoalaSat in #2753
- feat: make dispute email dynamic by @gabbygator184 in #2720
- Fix incomplete admin order cancel by @gabbygator184 in #2742
- Better coordinator selector by @KoalaSat in #2756
- Fix dispute order ID corruption by @gabbygator184 in #2759
- fix: wrap long words in chat by @gabbygator184 in #2761
- Fix admin trade resolution swap by @gabbygator184 in #2757
- Fix do_accounting crash on disputed swap orders by @adity1raut in #2716
- Add Matrix and include both everywhere by @KoalaSat in #2764
- Document restricted LND macaroon in #2765
- Use DevFund pubkey ENV by @KoalaSat in #2762
- Record blocked upgrades by @KoalaSat in #2778
- Bump @types/node from 26.4.1 to 26.6.1 in /frontend by @dependabot[bot] in #2772
- Bump @typescript-eslint/parser from 8.69.0 to 8.70.0 in /frontend by @dependabot[bot] in #2773
- Bump @mui/lab from 9.0.0-beta.8 to 9.0.0-beta.9 in /frontend by @dependabot[bot] in #2770
- Bump the frontend-security group in /frontend with 4 updates by @dependabot[bot] in #2769
- Stop dependabot on blocked libraries by @KoalaSat in #2780
- Bump electron from 44.3.0 to 44.4.1 in /desktopApp in the desktop-all group by @dependabot[bot] in #2766
- Bump the frontend-security group across 1 directory with 2 updates by @dependabot[bot] in #2779
- Bump the frontend-babel-webpack group across 1 directory with 2 updates by @dependabot[bot] in #2781
- Bump @eslint/eslintrc from 3.3.6 to 3.3.7 in /frontend in the frontend-eslint group by @dependabot[bot] in #2782
- Bump prettier from 3.9.6 to 3.9.8 in /frontend by @dependabot[bot] in #2783
- Bump the python-patch group across 1 directory with 6 updates by @dependabot[bot] in #2784
- Bump isbang/compose-action from 3.1.0 to 3.2.0 in the ci-misc group by @dependabot[bot] in #2785
- migration alter order logs by @jerryfletcher21 in #2775
- DevFund community split by @KoalaSat in #2763
- Update agents files by @KoalaSat in #2787
- feat: Implement Garage Key functionality and account recovery by @eudaldgr in #2375
- Update AGENTS for Garage Keys by @KoalaSat in #2806
- Dependabot Bump 09-28 by @KoalaSat in #2807
- Merge gravity2106 docs updates by @KoalaSat in #2808
- Fix GHSA-3jxq-v3c4-6j49 by @KoalaSat in #2810
- Display coordinator fees in order view by @KoalaSat in #2786
- Add btc2b swamp mehtod by @KoalaSat in #2813
- Fix GHSA-22q8-9ghc-jg3h by @KoalaSat in #2809
- Enable nostr encrypted chat by @KoalaSat in #2811
- Better used robot alert by @KoalaSat in #2812
- chore(deps): bump undici from 7.29.0 to 7.30.0 in /desktopApp by @dependabot[bot] in #2821
- chore(deps-dev): bump brace-expansion from 1.1.18 to 1.1.21 in /desktopApp by @dependabot[bot] in #2822
- chore(deps): bump dawidd6/action-download-artifact from 24 to 27 in the ci-artifact-pipeline group across 1 directory by @dependabot[bot] in #2817
- chore(deps-dev): bump postcss-selector-parser from 7.1.5 to 7.1.6 in /frontend by @dependabot[bot] in #2842
- chore(deps): bump source-map-js from 1.2.1 to 1.2.2 in /frontend by @dependabot[bot] in #2841
- chore(deps): bump the frontend-security group in /frontend with 4 updates by @dependabot[bot] in #2834
- chore(deps-dev): bump @types/node from 26.6.3 to 26.6.4 in /frontend by @dependabot[bot] in #2835
- chore(deps-dev): bump brace-expansion from 1.1.18 to 1.1.21 in /frontend by @dependabot[bot] in #2823
- chore(deps-dev): bump globals from 17.12.0 to 17.13.0 in /frontend by @dependabot[bot] in #2837
- chore(deps-dev): bump @typescript-eslint/parser from 8.70.1 to 8.71.1 in /frontend by @dependabot[bot] in #2838
- chore(deps): bump django from 5.2.17 to 5.2.18 by @dependabot[bot] in #2833
- chore(deps): bump the python-patch group across 1 directory with 7 updates by @dependabot[bot] in #2836
- Revert fix ghsa 22q8 9ghc jg3h by @KoalaSat in #2846
- Update FreePort coordinator contact info by @fp-coordinator in #2848
- chore(deps-dev): bump electron from 44.4.5 to 44.7.0 in /desktopApp in the desktop-all group across 1 directory by @dependabot[bot] in #2818
- Revert fix by @KoalaSat in #2849
- Fix race condition in orders and robot avatars drift by @KoalaSat in #2850
- Garage key review by @KoalaSat in #2851
- chore(deps-dev): bump electron from 44.7.0 to 44.7.2 in /desktopApp in the desktop-all group by @dependabot[bot] in #2852
- chore(deps): bump the python-patch group with 3 updates by @dependabot[bot] in #2853
- chore(deps-dev): bump eslint-plugin-prettier from 5.5.6 to 5.5.7 in /frontend in the frontend-eslint group by @dependabot[bot] in #2855
- chore(deps-dev): bump @babel/runtime from 7.29.7 to 7.29.10 in /frontend in the frontend-babel-webpack group by @dependabot[bot] in #2856
- chore(deps-dev): bump prettier from 3.9.9 to 3.9.10 in /frontend by @dependabot[bot] in #2858
- chore(deps-dev): bump @types/node from 26.6.4 to 26.6.5 in /frontend by @dependabot[bot] in #2859
- chore(deps-dev): bump @typescript-eslint/parser from 8.71.1 to 8.71.2 in /frontend by @dependabot[bot] in #2860
- chore(deps): bump @mui/lab from 9.0.0-beta.9 to 9.0.0-beta.10 in /frontend by @dependabot[bot] in #2857
- chore(deps): bump the frontend-security group in /frontend with 5 updates by @dependabot[bot] in #2854
- chore(deps-dev): bump brace-expansion from 1.1.18 to 1.1.21 by @dependabot[bot] in #2824
- docs: point to coordinator onion addresses as fallback on access page by @f321x in #2871
- chore(deps): bump pillow from 12.3.0 to 13.0.0 by @dependabot[bot] in #2861
- chore(deps): bump undici from 7.30.0 to 7.30.1 in /desktopApp by @dependabot[bot] in #2872
- chore(deps-dev): bump electron from 44.7.2 to 44.9.1 in /desktopApp by @dependabot[bot] in #2875
- chore(deps-dev): bump fast-uri from 3.1.7 to 3.1.9 in /frontend by @dependabot[bot] in #2873
- Payout safety: check reward sources and buyer payouts against LND, optional withdrawal limits by @ammanaya-coord in #2864
- chore(deps-dev): bump serialize-javascript from 7.1.0 to 7.1.4 in /frontend by @dependabot[bot] in #2874
- Enforce tests to agents and check coverage by @KoalaSat in #2876
- Android: update embedded Tor to 0.4.9 (kmp-tor 2.6.0); tor 0.4.8 can no longer bootstrap by @ammanaya-coord in #2879
- v0.8.8 alpha by @KoalaSat in #2881
- chore(deps): bump i18next-http-backend from 4.0.2 to 4.0.4 in /frontend by @dependabot[bot] in #2880
- Fix CI by @KoalaSat in #2886
- Fix Android CI by @KoalaSat in #2887
New Contributors
- @adity1raut made their first contribution in #2716
- @eudaldgr made their first contribution in #2375
- @fp-coordinator made their first contribution in #2848
- @ammanaya-coord made their first contribution in #2864
Full Changelog: v0.8.7-alpha...v0.8.8-alpha