Changelog

Every change shipped to LazyGrip.net, pulled live from GitHub.

August 2, 2026

Fix version-update workflow to use PR instead of direct push

July 31, 2026

Sync posting verification gate to repo + bump next.js

Add check-site.ps1 health check script

Add IP rate limiting to public Workshop decode/convert routes

Center footer layout instead of space-between

Add posting requirements section to Terms of Service

Add DMCA notice-and-takedown policy to Terms of Service

workshop: carry GSE source metadata through conversion and show origin

July 30, 2026

fix(workshop): carry HelpURL, PlatformID, Checksum, and GSEVersion through GSE conversion

Correct engine claim, macro guidance, ownership wording and licensing

fix(workshop): carry Helplink through GSE conversion and stop collapsing multi-sequence authors

July 29, 2026

Close the mobile filter sheet when filters are cleared

Clamp out-of-range browse pages to the last page

Await the view-count RPC so views are counted again

Remove the unused sequences data module

Quote the search pattern so a comma cannot break the browse query

Fix browse filters not updating the card list

July 28, 2026

perf: take theme off the server and make sequence pages cacheable

Create CODEOWNERS file for merge approval rules

July 26, 2026

Server-render the sequence corpus and fix the empty browse listing

SEO: complete the sitemap, encode profile URLs, noindex the update route

SEO: add canonicals and per-route metadata, fix duplicate Devourer spec id

July 25, 2026

Restrict sequence_versions RLS to published-or-own, complete audit doc

Fix stale Key Down Casting docs, add charged-spell and CVar dashboard coverage

chore: npm audit fix for dompurify and next patch bumps

Add anonymous rate limit to increment_view_count

July 22, 2026

Cap workshop request sizes: spells limit + convert-spell-texts array length

Add RPC/route security audit doc + automated check script

Add ownership check to update_sequence_with_version (SEC fix)

Capture live auth.uid() ownership check fixes + drop unowned notifications policy

Auto-update GRIP-EMS version to v2.3.14

July 21, 2026

Fix stale guide/from-gse URL in sitemap generator

Add redirect for renamed guide/from-gse URL

Fix comments SELECT policy: allow authors to see own soft-deleted comments

Drop 003; comments policy is live with the author_id clause

Switch auth to PKCE with a server-side code exchange

Upgrade to Next 16 and React 19

Rename workshop_new to workshop now that the old engine is gone

Add MIT license badge to README and package.json

Add MIT LICENSE

Pass workflow step outputs via env and add build/lint/typecheck CI

Remove leftover test fixtures and switch next.config images to remotePatterns

Remove dead workshop decoder library and gripDecoder (zero importers)

SEC8: restrict comments SELECT to non-deleted rows

July 20, 2026

Re-pin dompurify to 3.4.11

Add schema-sync migration capturing live database state

Fix unauthenticated Discord webhook forgery, add URL allowlisting (SEC1, SEC7)

Add Actionbutton Override plugin mention to installation guide

Trigger redeploy for rating confirm fix

Rating now requires explicit confirm, no longer saves on star click

Expand positive rating tags

Add Weak DPS tag, optional public comment from rating prompt

Fix stale session bypass in password reset

Add forgot-password flow (request + reset) as a fourth AuthForm mode

Add forgot-password flow (request + reset)

Add optional rating reason tags, author-only breakdown

Auto-update GRIP-EMS version to v2.3.12

July 19, 2026

Fix author-lock secret fallback vulnerability

Fix singular sequence URLs, add og:image + page metadata

Guide: add Interleave/Weave and Spell Cache Viewer sections, fix modifier troubleshooting

July 18, 2026

Add collection support and delete action to draft system

Migrate sequences from is_draft/is_published booleans to sequence_status enum

Guide: rename GSE references to "legacy program", add modifiers section

July 17, 2026

Fix workshop builder dropping v2.3.3 fields, add privacy/talent/content-type UI, improve label readability

Fix workshop builder dropping v2.3.3 fields on import, add missing UI

Add original_author capture to publish flow

Auto-update GRIP-EMS version to v2.3.10

Update test-curseforge-api.yml