[kwsantiago]

Bumps the pinned upstream release from v0.6.0 to v0.7.0 (commit f5f3dbb). v0.6.1 was never packaged, so its connection lifecycle fixes come along.

v0.7.0 is a security release: an AUTH event signed for another relay could be altered to authenticate as that user, and an out-of-range filter value or malformed sync message could crash the relay (this package builds ReleaseSafe, where it aborted the process) or pin a CPU core. It also brings multi-filter and limit: 0 handling in line with NIP-01, makes NIP-78 app data private to its author, adds the new NIP-86 methods, and applies bans, allowlists and limits to events the spider syncs. No settings change and no migration.

Built the x86_64 image from this Dockerfile and ran it: it starts as v0.7.0, NIP-11 reports 0.7.0 with NIP-78 advertised, and a REQ with "limit": 99999999999 gets EOSE instead of aborting.

Summary by CodeRabbit

• New Features
  • Added management API capabilities in Wisp 0.7.0.
• Improvements
  • Updated subscription and synchronization behavior.
  • No migration is required, and existing settings remain unchanged.
• Security
  • Includes security fixes from Wisp 0.7.0 and 0.6.1.
• Release
  • Updated the app’s current version to 0.7.0.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: d343d7d2-835c-4c6c-87a0-d7178c833043

📥 Commits

Reviewing files that changed from the base of the PR and between 56c8cdb and dc634f4.

📒 Files selected for processing (2)

• Dockerfile
• startos/versions/current.ts

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

Walkthrough

The Docker build now pins Wisp v0.7.0 and its specified commit. The current StartOS version and five localized release notes also change to v0.7.0.

Changes

Wisp v0.7.0 Upgrade

Layer / File(s)	Summary
Pin and describe Wisp v0.7.0 Dockerfile, startos/versions/current.ts	The Docker build uses the v0.7.0 commit. The current version and five localized release notes describe the release, including security fixes, behavior changes, management API additions, and no required migration.

Priority: ⬆️ High

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other · Severity of issue fixed: High

Suggested reviewers: helix-a

Merge Risk: ⚪ Minimal · up to dc634

The package is pinned to the verified v0.7.0 commit, and the inspected settings schema is unchanged. No concrete merge-blocking issue was established.

Architecture Summary

Architecture risk: 🔵 Low · up to dc634

The change affects 2 systems.

Changed systems: startos, Dockerfile

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — startos (service) was modified; 1 changed file maps to changed impact.
• observed — Dockerfile (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in Dockerfile: The Wisp version and commit build arguments change from v0.6.0 and 6f47ec4e04bacf75ffe02fb6462cfbe41222b0d3 to v0.7.0 and f5f3dbbec55392b45c380782d1cb0c74e371f873.
• observed — Modified behavior in startos/versions/current.ts: The current version changes from 0.6.0:0 to 0.7.0:0, and the five localized release notes replace the v0.6.0 notes with v0.7.0 changes: an AUTH authentication bypass affecting the management API and protected events; relay crashes or CPU exhaustion from invalid subscription values or malformed sync messages; connection lifecycle fixes; matches from all subscription filters, no stored events for limit 0, and since/until handling for multi-kind queries; authenticated-author-only NIP-78 data; new management API unban, unallow, and list methods; outright blocking by disallowkind; and enforcement of bans, allowlists, and limits on synchronized events. The notes also state that settings do not change and no migration is needed, replac

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: updating Wisp to v0.7.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the version pin,
The new release notes hop in.
Five tongues tell what has changed,
The build is neatly rearranged.
No migration blocks the way,
Wisp takes a fresh step today.}

_{Comment @coderabbitai help to get the list of available commands.}