v1.0.12

What's Changed

Fixed

• Blinking Public Sprite & Console Errors — Fixed a bug where the "Sprite of the Minute" would constantly blink and spam the console with TypeError: Cannot read properties of undefined (reading 'length') inside drawPixels.
• The 2026 Int32 Bug — The animation loop was calculating frames using (Date.now() >> 7) % length. Because Date.now() in 2026 exceeds INT32_MAX, the bitwise shift operator coerced the timestamp into a negative 32-bit integer. This resulted in negative array indices and crashed the renderer. Replaced with Math.floor(Date.now() / 128) to safely stay in standard JavaScript number space.
• Added defensive type guards to the canvas renderer to prevent future crashes on malformed payloads.

Verified: syntax check, npm audit --omit=dev clean.

v1.0.11

What's Changed

Fixed

• Memory leak — ipBuckets rate-limit map was never cleaned, causing unbounded growth with unique visitor IPs over time. Now evicted alongside session mappings in the periodic cleanup sweep.
• Docs — README architecture diagram and tree said "Express server"; corrected to node:http.

Dependencies

• Refreshed ws to 8.20.0 and lockfile transitive dependencies.
• @spooled/sdk kept at ^1.0.26 — the range already accepts 1.0.27 once published.

CI

• Bumped checkout, setup-node, Docker, Trivy, and GitHub Release actions to current stable majors.

Verified: npm ci, node --check, npm audit --omit=dev clean.

v1.0.10

Full Changelog: v1.0.9...v1.0.10

v1.0.9

Full Changelog: v1.0.8...v1.0.9

v1.0.8

Full Changelog: v1.0.7...v1.0.8

v1.0.7

Full Changelog: v1.0.6...v1.0.7

v1.0.6

Full Changelog: v1.0.5...v1.0.6

v1.0.3

Full Changelog: v1.0.2...v1.0.3

v1.0.2

Full Changelog: v1.0.1...v1.0.2

v1.0.1

Full Changelog: v1.0.0...v1.0.1