What's Changed
- docs: add security policy and private vulnerability reporting by @iliaal in #1257
- docs: align CONFIGURATION.md with the engine, and add Opera to the cookie scan by @iliaal in #1263
- test: isolate the suite from the developer's last30days config by @iliaal in #1265
- fix(security): require https for the hosted API and keep local state owner-only by @iliaal in #1267
- feat: add dev.to as an opt-in keyless source by @iliaal in #1271
- fix(pipeline): stop adding jobs to host-supplied query plans by @mvanhorn in #1258
- fix(hackernews): link HN comment quotes to the comment, not the article by @mvanhorn in #1259
- fix(render): pluralize footer nouns ending in consonant+y by @mvanhorn in #1261
- fix(fusion): keep duplicate HN submissions of one URL apart by @mvanhorn in #1262
- fix(pipeline): fetch each identical source search once per run by @mvanhorn in #1260
- fix(rerank): weigh real engagement in fallback ranking by @mvanhorn in #1270
- fix(youtube): drop out-of-window videos on recent topics by @mvanhorn in #1266
- fix(github): keep pinned repos whose newest release predates the window by @mvanhorn in #1264
- chore(release): bump version to 3.28.0 by @github-actions[bot] in #1272
Full Changelog: v3.27.3...v3.28.0