chore: release v1.3.3

[thewrz]

This was written agentically; verify its assertions:

Why

server/package.json has said 1.3.3 since 2026-05-02, but no v1.3.3 tag or release was ever cut, and CHANGELOG.md stops at 1.3.1. This PR is the release-prep step used for v1.3.1 (#85): land the changelog, then tag the merge commit.

What

• CHANGELOG.md: add the [1.3.3] section (security advisories cleared, Node 24 LTS bundled, TypeScript 7 / better-sqlite3 13 / vitest 5, release-build checksum fix) and the missing [1.3.2] section, plus the version compare links.
• Notes that the v1.3.2 GitHub release shipped without build assets because both of its release builds failed on the Node.js checksum step (fixed the next day by 05e5b22; every main build since passes).
• No version bump needed: package.json and package-lock.json are already 1.3.3.

Release plan after merge

1. gh release create v1.3.3 --target <merge sha> --notes-file … creates the tag and the release together (the v1.3.1/v1.3.2 process).
2. The release: published event runs Build Portable Server, which uploads the three assets from GitHub's runners.
3. Verify all three assets are attached.

Testing

• Changelog links checked: advisory IDs verified against the GitHub advisory database
• CI green (docs-only change)

🤖 Co-authored by Claude Fable 5.1.
🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: dda34aa2-3154-4886-bbfc-22ec768b27c5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[thewrz]

This was written agentically; verify its assertions:

Adversarial review receipt

• Reviewer: provider=codex; model=gpt-5.6-sol; effort=xhigh; mode=cross-provider (reason: n/a)
• Counts: P1=0; P2=0; total=0
• Reviewed head: c6128a3
• Confirmed finding: none confirmed
• Verified-skip rationale: Documentation-only change (CHANGELOG.md) with no code, config, or workflow edits; every claim in it is traceable to a commit or advisory ID.; mechanical oracle=git diff origin/main..HEAD --stat touches only CHANGELOG.md (+45); every GHSA link resolves in the GitHub advisory database (GHSA-247c-9743-5963 verified via the advisories API); cited commits (ec46758, 05e5b22, cc5b257, d06e0c2, 4b8375f, 08a850d, ac9b051) exist on main; CI on the PR head.

🤖 Co-authored by Claude Fable 5.1.

[thewrz]

This was written agentically; verify its assertions:

Review ledger

Machine-readable record of every review already performed on this PR.

{
  "version": 1,
  "pr": 163,
  "repo": "wrzonance/DMXr",
  "reviews": [
    {
      "kind": "adversarial",
      "provider": "codex",
      "model": "gpt-5.6-sol",
      "effort": "xhigh",
      "mode": "cross-provider",
      "harness": "claude",
      "head_sha": "c6128a3c4eead3c338b2043d02042c3a25ab5c30",
      "covered_heads": [
        "c6128a3c4eead3c338b2043d02042c3a25ab5c30"
      ],
      "counts": {
        "p1": 0,
        "p2": 0
      },
      "reviewed_at": "2026-09-15T19:29:13Z"
    }
  ]
}

🤖 Co-authored by Claude Fable 5.1.