SkillHub v0.2.24

SkillHub v0.2.24 adds optional public GitHub Skill discovery and synchronization, S3-compatible deployment options, and improved package and permission handling.

🌟 Highlights

• Discover and synchronize Skills from public GitHub repositories through a separately enabled worker, with source tracking and review before publication.
• Deploy self-hosted S3-compatible storage with optional Silo or RustFS Compose configurations without changing existing storage automatically.
• Preserve versioned Skill task templates in packages and expose a non-blocking summary during publishing preflight.

✨ Features

• Add public GitHub repository discovery, scheduled synchronization, source and task management, and a dedicated review queue. The optional Go worker uses a separate service credential; administrators configure admission limits and enable discovery explicitly. Imported packages do not bypass scanning and review by @XiaoSeS in #985.
• Add optional Silo and RustFS single-node deployment overlays, storage diagnostics, and separate internal upload and public download endpoints. Existing local and external S3 configurations remain available; changing the endpoint does not migrate existing objects by @XiaoSeS in #996.
• Preserve authored .skillhub/examples.json files through package publishing and downloading, and report recognized example status and counts in publishing preflight without rejecting an otherwise valid package for an unrecognized example format by @XiaoSeS in #1007. Native conversation interaction is delivered through the independently released DSH plugin.
• Add the optional downloadableOnly=true version-list filter, applying availability filtering and publication-time ordering before pagination while preserving the default management-history view by @XiaoSeS in #986.

🐛 Bug Fixes

• Keep self-hosted font requests within the configured application base path, without depending on assets served at the site root by @XiaoSeS in #1016.
• Keep current Skill owners read-only after removal from a team namespace: eligible active accounts retain access to their own content but cannot continue modifying it through ownership alone. Refresh Web permissions after rejected writes by @XiaoSeS in #975.
• Use the clipboard fallback when copying Suite installation commands in HTTP contexts by @XiaoSeS in #983.
• Bundle Keycloak, Auth0 and Okta login icons and retain a generic icon for other OIDC providers by @Danny5487401 in #969.
• Preserve private permissions and cleanup for staged S3 uploads, and surface per-object batch-delete failures instead of treating HTTP 200 as complete success by @XiaoSeS in #996.
• Update Vite dependencies in the Web application and documentation site to address reported vulnerabilities by @FenjuFu in #1006.
• Update the optional GitHub worker to Go 1.27.3 and Web test tooling to Vitest 4.1.12 for security fixes by @XiaoSeS in #1013.
• Update Web development HTTP dependencies to address reported vulnerabilities by @XiaoSeS in #1014.

📚 Documentation

• Document public GitHub synchronization, deployment controls, storage configuration and migration precautions in #985 and #996.
• Clarify invitation-link recovery, invitation history and delivery boundaries by @XiaoSeS in #984.

🔧 Chore

• Align the Web toolchain and CI with supported Node.js 22 and 24 versions and the declared pnpm version by @zjncs in #992.
• Fix DeepWiki crawler dependency resolution and add a manual workflow entry by @XiaoSeS in #976.
• Require complete, freshly generated DeepWiki crawl results and avoid excessive worker scheduling by @XiaoSeS in #1015.
• Restore runtime image mirroring for registries that do not accept OCI attestation manifests while preserving runnable image platforms by @XiaoSeS in #1012.
• Add an advisory check for Flyway migration-number collisions across open pull requests in #999.
• Before upgrading, back up PostgreSQL and the corresponding local or object storage. The Server applies Flyway V76–V119. Resolve any existing github namespace or github-sync-publisher account collision before upgrading; database rollback requires restoring the matching pre-upgrade backup. Upgrade Java and the optional GitHub worker together before enabling collection.
• Packages containing .skillhub/examples.json require CLI and DSH consumers that support the new authored-content and fingerprint rules. Update consumers before distributing these packages; existing published fingerprints are not recalculated. CLI and DSH package releases remain independent of this application Release.

📖 Documentation

• Docs site: https://iflytek.github.io/skillhub/

Full Changelog: v0.2.23...v0.2.24