Merge tag '0.4.3'

BotKit 0.4.3

Author: dahlia

CHANGES.md

@@ -7,6 +7,17 @@ Version 0.5.0
 To be released.
 
 
+Version 0.4.3
+-------------
+
+Released on June 4, 2026.
+
+ -  Upgraded Fedify to 1.9.12, which fixes an SSRF protection bypass
+    vulnerability.  [[CVE-2026-50131]]
+
+[CVE-2026-50131]: https://github.com/fedify-dev/fedify/security/advisories/GHSA-xw9q-2mv6-9fr8
+
+
 Version 0.4.2
 -------------
 
@@ -100,6 +111,15 @@ Released on March 30, 2026.
 [#19]: https://github.com/fedify-dev/botkit/pull/19
 
 
+Version 0.3.4
+-------------
+
+Released on June 4, 2026.
+
+ -  Upgraded Fedify to 1.9.12, which fixes an SSRF protection bypass
+    vulnerability.  [[CVE-2026-50131]]
+
+
 Version 0.3.3
 -------------
 

deno.json

@@ -2,10 +2,10 @@
   "workspace": ["packages/*", "examples/*"],
   "unstable": ["kv", "temporal"],
   "imports": {
-    "@fedify/denokv": "jsr:@fedify/denokv@2.1.14",
-    "@fedify/fedify": "jsr:@fedify/fedify@2.1.14",
-    "@fedify/vocab": "jsr:@fedify/vocab@2.1.14",
-    "@fedify/vocab-runtime": "jsr:@fedify/vocab-runtime@2.1.14",
+    "@fedify/denokv": "jsr:@fedify/denokv@~2.1.15",
+    "@fedify/fedify": "jsr:@fedify/fedify@~2.1.15",
+    "@fedify/vocab": "jsr:@fedify/vocab@~2.1.15",
+    "@fedify/vocab-runtime": "jsr:@fedify/vocab-runtime@~2.1.15",
     "@logtape/logtape": "jsr:@logtape/logtape@^1.3.5",
     "@std/fs": "jsr:@std/fs@^1.0.19",
     "@std/path": "jsr:@std/path@^1.1.1",
@@ -27,7 +27,7 @@
     "exclude": ["*.md", "*.yaml", "*.yml"]
   },
   "tasks": {
-    "hongdown": "deno run -A npm:hongdown@^0.3.8",
+    "hongdown": "deno run -A npm:hongdown@^0.4.3",
     "check": {
       "dependencies": ["check-versions"],
       "command": "deno check && deno lint && deno fmt --check && deno task hongdown --check && deno publish --dry-run --allow-dirty"

deno.lock

@@ -38,12 +38,12 @@ a simple two-factor authentication mechanism through the fediverse.
 
 The authentication flow works as follows:
 
-1.  *Initial setup*: The user visits the web interface and enters their fediverse
-    handle (e.g., `@username@server.com`).
+1.  *Initial setup*: The user visits the web interface and enters their
+    fediverse handle (e.g., `@username@server.com`).
 
-2.  *Challenge generation*: The system generates a random set of emojis and sends
-    a direct message containing a poll with all available emoji options to
-    the user's fediverse account.
+2.  *Challenge generation*: The system generates a random set of emojis and
+    sends a direct message containing a poll with all available emoji options
+    to the user's fediverse account.
 
 3.  *Web interface display*: The correct emoji sequence is displayed on the
     web page.

docs/examples.md

@@ -106,6 +106,7 @@ Features
      -  Follower and following relationship management
      -  Poll voting system
 
- -  **Resource management**: Implements `Disposable` interface for proper cleanup
+ -  **Resource management**: Implements `Disposable` interface for proper
+    cleanup
 
 <!-- cSpell: ignore mybot -->