SkillHub v0.2.22

SkillHub v0.2.22 expands global Skill lifecycle management, adds Feishu and DingTalk sign-in, strengthens account security, and improves deployment reliability.

🌟 Highlights

• Global Skill promotions can now be updated to a newer team Skill version, revoked through review or direct action, and promoted again after revocation.
• Feishu and DingTalk are available as optional public sign-in providers, with refreshed login and registration pages that expose only configured authentication methods.
• Organization read APIs and a SUPER_ADMIN organization-creation API are now available with membership-scoped access control.
• Account merges now require approval from the secondary account and revoke that account's API tokens after completion.

⬆️ Upgrade Notes

• Back up PostgreSQL before upgrading. Flyway V66-V67 add the persistence required for promotion updates and revocation.
• API tokens belonging to a merged secondary account are revoked after the merge; affected automation must use newly issued tokens.
• When upgrading to Scanner 2.1, complete the coordinated Server and Scanner rollout before enabling AI Defense.

✨ Features

• Add global Skill promotion updates, revocation review and direct revocation, retained audit history, and safe re-promotion by @XiaoSeS in #933.
• Add optional Feishu sign-in by @XiaoSeS in #877 and optional DingTalk sign-in by @XiaoSeS in #880.
• Refresh login and registration entry points, preserve local-password fallback, and restrict post-login redirects to safe in-site destinations by @XiaoSeS in #901.
• Add membership-scoped Organization and Login Connection read APIs by @XiaoSeS in #897, plus SUPER_ADMIN organization creation by @XiaoSeS in #902.
• Add versioned identity-provider adapter contracts by @XiaoSeS in #896.
• Render fenced Mermaid blocks as diagrams with source fallback when rendering fails by @dongmucat in #892.
• Publish orca-replay, ledger-tasks-yylo, and triage-nda as built-in Skills through pinned immutable artifacts in #878, #913, and #931.

🐛 Bug Fixes

• Require authenticated secondary-account approval for account merges and serialize competing confirmations by @XiaoSeS in #927.
• Harden Scanner 2.1 credential handling, provider normalization, finding redaction, and temporary-storage recovery by @dongmucat in #879.
• Bound OAuth token-response reads and stop logging raw GitLab identity claims by @XiaoSeS in #895.
• Restore Suite Bundle import in browsers and plain-HTTP deployments without crypto.randomUUID by @dongmucat in #890.
• Refresh Nginx upstream DNS resolution after backend redeployments by @XiaoSeS in #900.
• Replace the withdrawn MinIO runtime image with the pinned pgsty/silo image by @X77seven in #925.
• Accept both level-2 and level-3 Issue section headings in automated triage by @dongmucat in #916.

📚 Documentation

• Refresh the README architecture diagram by @dongmucat in #908.
• Correct the documented backend development command from make dev-backend to make dev-server by @strawberryOJam in #876.
• Documentation site: https://iflytek.github.io/skillhub/

Full Changelog: v0.2.21...v0.2.22