SkillHub v0.2.23

SkillHub v0.2.23 adds Skill avatars, single-use team invitations and reviewed visibility changes, while improving publishing metadata, access controls and native DeepSeek Harness integration source.

🌟 Highlights

• Upload and crop Skill avatars, with avatar and package changes reviewed together when submitted in the same update.
• Invite members with single-use team links and retain invitation and join history.
• Change the visibility of a published Skill without uploading a new version. Audience expansion requires review; restriction takes effect immediately.
• Introduce native DeepSeek Harness plugin source for browsing and managing Registry Skills; plugin packages follow an independent release cycle.

✨ Features

• Add Skill avatars, staged uploads, configurable avatar moderation, single-use namespace invitations and invitation history by @XiaoSeS in #947.
• Add independent, reviewed visibility changes for published Skills by @XiaoSeS in #963.
• Support version-consistent display names from package metadata or Web publishing, while preserving Skill slugs and installation coordinates by @raymondtc and @XiaoSeS in #950 and #957.
• Add draft CRUD, file management and structure-validation APIs as the first layer of the authoring platform; this release does not include a Web authoring workspace, model execution or publication integration by @zjncs in #935.
• Add local sign-in and self-registration settings, plus initial role grants for newly created external accounts with verified emails by @XiaoSeS in #936 and #939.
• Allow API tokens with skill:publish scope to attach and detach Skill labels, retaining resource permission checks by @martindissingmadsen in #965.
• Add native DeepSeek Harness plugin source and integration guidance in #956, with dependency-compatibility checks and installation-receipt recovery improvements in #967, by @XiaoSeS. Plugin packages are released independently from the SkillHub application.
• Add the reviewed adversarial-review package to the built-in Skill source collection by @RevolutionLA in #909.

🐛 Bug Fixes

• Preserve non-default Web ports in logout redirects and sanitize forwarded host and port headers by @XiaoSeS in #972.
• Restore browser-session avatar uploads on the v1 API, return localized 404 responses for missing API routes, and automatically refresh scanning Skill versions by @XiaoSeS in #970.
• Apply Skill access checks to stars and ratings, and filter inaccessible favorites before pagination and counting by @XiaoSeS in #961.
• Explain the required revocation workflow when deleting promoted Skills and avoid duplicate deletion errors by @XiaoSeS in #962.
• Resolve the Helm Web upstream through a fully qualified Kubernetes Service hostname, including custom cluster domains and reused values by @Danny5487401 in #945.
• Update vulnerable Web and documentation dependencies while retaining the compatible Mermaid rendering line by @FenjuFu in #953.
• Preserve existing runtime configuration when retrying installation by @Tivonsico in #941.

📚 Documentation

• Document credential checks, Kubernetes versions, runtime locations and port conflicts by @FenjuFu in #907.
• Clarify contribution signing, portable documentation links and promoted-Skill deletion in #942, #943 and #949.

🔧 Chore

• Back up PostgreSQL and local Skill storage before upgrading. The Server applies Flyway V68–V75 for authentication settings, draft authoring, avatars, invitations and visibility review. Schema rollback requires restoring the matching pre-upgrade database and storage backups.
• Refine shared Web UI foundations by @XiaoSeS in #952.
• Keep monthly reward tags separate from application releases by @FenjuFu in #920.

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

Full Changelog: v0.2.22...v0.2.23