Every production change receives a version, a plain-language explanation, known limitations, and verification evidence before it is called complete.
Version 1.6.0
Share the idea before the paperwork
GoJumpingJack's contribution tools now begin with the post, place, event, or photo itself, revealing extra questions only when safety, attribution, or missing source data actually requires them.
New
Adds a compact original-post composer with Update, Recommendation, Announcement, and Question flair plus safe bold, italic, list, quote, and named-link formatting.
Adds primary and secondary discovery categories for posts, places, and events while keeping reputation tied to one canonical primary category.
Gives unopened cities a purpose-built landing experience centered on following the city, requesting activation, and applying to moderate.
Improved
Makes original GoJumpingJack posts the default and keeps Social repost as a compact URL-first alternative, asking for a title only when approved provider metadata does not supply one.
Processes selected or pasted still photos immediately, supports five photos on posts and city-photo suggestions, and supports ten photos while creating a new place or event.
Uses one final rights confirmation at submission instead of interrupting every photo selection, while keeping unconfirmed media private and impossible to publish.
Lets photo-led original posts omit a body when at least one image has completed private normalization, safety, and moderation checks.
Carries reviewed place and event categories into linked recommendations and includes secondary categories in Community Buzz and event discovery filters.
Operations
Extends protected-maintenance coverage to the new category records and keeps all new media and category commands behind authenticated, audited server boundaries.
Updates release readiness to schema 1.6.0 and preserves the existing fail-closed image-safety and human-review gates.
Known limitations
Direct video uploads remain intentionally unavailable; video continues through approved public-provider links.
External titles, thumbnails, and embeds still depend on each provider's approved public metadata and embed policies.
Post formatting is deliberately limited to a safe, compact subset rather than arbitrary HTML or full rich-text documents.
Version 1.5.14
Choose Google or email without weakening trust
Members can now enter GoJumpingJack with a Google account, while original-post links receive live Google Web Risk screening before they can be saved.
New
Enables Continue with Google on both sign-up and sign-in while preserving the existing verified member profile and policy-acceptance flow.
Activates live Google Web Risk checks for named HTTPS links in original GoJumpingJack posts.
Improved
Keeps email-and-password access available beside Google instead of forcing members into one account provider.
Uses the production GoJumpingJack home page, privacy policy, terms, and Supabase callback in the Google consent and redirect boundary.
Operations
Publishes the Google OAuth app with only OpenID, email, and basic profile scopes; no sensitive or restricted Google data scopes are requested.
Restricts the server-held Google API key to Web Risk, keeps provider credentials outside the repository, and removes superseded setup credentials after rotation.
Known limitations
The Google consent screen intentionally has no uploaded logo yet; adding one would introduce a separate Google brand-verification review.
Yahoo sign-in remains deferred because it requires a separate approved OpenID Connect provider and recovery review.
Google Web Risk can experience upstream outages; original-post links continue to fail closed when a fresh safety decision is unavailable.
Version 1.5.13
Contribute from wherever discovery happens
Phase 1 contribution tools now begin where members naturally discover a place, event, or conversation, while new link, media, role, and moderation boundaries keep those faster paths accountable.
New
Adds a compact Post, Place, Event, and Photo composer to the member dashboard and staffed city Community Buzz pages.
Lets members find an existing place or event before contributing, then create a linked recommendation or promotion post without rewriting canonical facts.
Adds rights-confirmed still photos to place and event submissions using the same private normalization and safety pipeline as original posts.
Adds named HTTPS links to original posts, Google Web Risk screening, guarded outbound redirects, link reporting, and automatic link disabling after independent eligible reports.
Adds a global administrator member lookup with audited, city-scoped role grants and removals.
Adds Google account access behind a disabled-by-default provider flag ready for hosted OAuth configuration.
Improved
Reduces the city contribution landing page to four plain-language choices and separates original posts from public social shares only when needed.
Supports pasting clipboard images into post, place, and event photo areas without introducing a separate draft step.
Returns successful post submission to the city Community Buzz so a contributor can keep exploring or add another item.
Rebuilds the public roadmap as phase headings, objectives, closed detail sections, and contextual suggestion links.
Uses one Back control throughout the contribution journey instead of route-specific return labels.
Fixed
Prevents an existing-place or existing-event recommendation from overwriting that object’s reviewed address, schedule, status, or other canonical facts.
Allows authors to remove drafts, declined items, withdrawn items, and visible posts from the surfaces where they manage or encounter them.
Keeps contribution media attached to the selected post, place, or event through review and display.
Operations
Keeps linked-post targets, safe-link decisions, link reports, and city-role changes behind audited database commands with direct table access revoked.
Excludes new accounts, restricted accounts, and coordinated reporting clusters from automatic link-disabling thresholds.
Bootstraps Gainesville stewardship for @NukaJackal when that profile exists and leaves all later promotion or demotion under administrator control.
Known limitations
Editing an already-published post remains a staged-revision design task; this release allows safe author removal everywhere but does not replace reviewed public text with an unreviewed edit.
Google sign-in remains hidden until its Google Cloud and Supabase provider credentials and redirects are configured.
Yahoo sign-in remains deferred because it requires a separate approved OpenID Connect provider and recovery review.
Original-post links remain unavailable when Google Web Risk cannot complete a fresh safety decision.
Version 1.5.12
Post photos without the paperwork
Original GJJ posts now ask members only to choose a photo and confirm that they own it or have permission to share it, while the application supplies the accessibility and audit context and delivers valid private images through one reliable boundary.
Improved
Reduced each original-post photo to a file choice and one plain-language ownership confirmation.
Removed typed alternative text, rights-basis, photographer, license, and public-attribution fields from the social-post composer.
Generates contextual accessibility text from the saved post title and records the authenticated member as the uploader without asking the member to repeat information.
Keeps the detailed provenance workflow unchanged for city hero-photo submissions, where public attribution and administrative selection still require it.
Fixed
Streams authorized post images through GoJumpingJack instead of redirecting the browser to a temporary private-storage address.
Detects legacy media records whose private object is absent and explains that the photo must be removed and added again instead of showing a broken image marked ready.
Adds safe delivery-stage diagnostics without logging image contents, storage credentials, signed addresses, or profile data.
Operations
Preserves private quarantine, metadata removal, MIME-signature validation, dimension limits, Rekognition screening, post moderation, and object-level access checks.
Direct post uploads remain limited to photos the member owns or has permission to share; public third-party posts remain an attributed external-share use case.
Adds regression coverage for the simplified authorization contract and full authenticated upload journey.
Known limitations
A legacy attachment whose stored object was lost cannot be reconstructed; the member must remove that attachment and add the original photo again.
Direct uploads remain rights-confirmed still images. Video and public third-party posts continue through approved public URLs.
Version 1.5.11
Photos while you write
Original GJJ posts now accept photos during composition without a separate draft-first step, and hosted image processing uses the storage-safe byte path already proven by city-photo uploads.
Improved
Shows the complete rights-confirmed photo workflow as soon as a member starts an original GJJ post.
Privately saves the member’s current post in the background when the first photo upload begins, preserving the existing ownership, audit, and orphan-cleanup protections without exposing a manual prerequisite.
Keeps explicit Save private draft available as an optional safeguard while describing new posts as posts rather than implementation workspaces.
Fixed
Copies normalized image output into ordinary ArrayBuffer-backed bytes before hosted object storage, preventing the reported safe-upload failure in the post-photo path.
Applies the same hosted-storage correction to private feedback screenshots so both direct-upload surfaces use one proven boundary.
Preserves the server’s specific processing stage and safe failure code instead of reducing storage and finalization failures to an untraceable generic error.
Operations
Retains quarantine, metadata removal, MIME-signature checks, dimension limits, Rekognition screening, per-image rights attestations, and human review unchanged.
Avoids a redundant client deletion after the trusted processor has already rejected and cleaned an image, preserving the diagnostic outcome for operations.
Adds regression coverage for uploading the first photo directly from a new post composer and continuing through submission.
Known limitations
Direct uploads remain rights-confirmed still images only; video continues to be URL-only, and uncertain safety results remain private.
Version 1.5.10
A Local’s Guide that stays focused
Local’s Guide now keeps the map and essential place list in one stable workspace, reveals details only when requested, gives administrators audited place and event editing, and brings reviewed local recommendations onto each place page.
Improved
Simplifies Local’s Guide by removing introductory, count, reset, and helper copy that competed with the map and filters.
Keeps the map at a fixed responsive height while the place list scrolls independently beside it.
Shows only each map number and place name until selected, then moves the selection to the top and reveals its description, address, and place-page link.
Keeps page scrolling separate from map navigation by disabling scroll-wheel map zoom.
Adds a reviewed community-knowledge section to place pages so local recommendations remain visible below the canonical place information.
New
Adds platform-administrator controls to manage public place information, coordinates, operating status, category, and visibility.
Adds platform-administrator controls to manage event information, category, visibility, freshness, and complete recurring schedules.
Operations
Publishes administrator changes as immutable revisions with actor, reason, request identity, prior revision, and resulting state preserved in audit history.
Regenerates future event occurrences after schedule changes and protects concurrent edits with lock-version checks.
Keeps administrative controls hidden from ordinary members and enforces platform-administrator authorization again at the database boundary.
Known limitations
Place recommendations include reviewed, published local contributions linked to that place; unreviewed drafts and unsupported content remain private.
Version 1.5.9
Local knowledge that keeps its place
Place and event submissions now preserve the contributor’s choices through address and duplicate checks, explain errors where they happen, accept familiar website formats, and keep moderation work close without slowing the Community Pulse.
New
Adds a role-aware Moderation section to the dashboard Jump to rail, with global queues, managed cities, action totals, and direct city-management links.
Adds Feedback beside Contact & Trust in the global footer.
Introduces an audited Closed Alpha publishing exception for the active platform administrator while preserving independent-review recusal for every other role.
Improved
Defaults new places to Open and preserves Category, Operating status, address, coordinates, and website fields while possible duplicates are resolved.
Moves possible-duplicate choices directly below the address or event-location fields that produced them.
Accepts familiar website input such as example.com or www.example.com and safely normalizes it to HTTPS before validation.
Returns successful place and event submissions to the city Share page so contributors can continue helping.
Removes the two introductory feature grids from About and makes the Closed Alpha header link open at the top of that page.
Parallelizes independent dashboard and header requests while streaming the heavier role-aware moderation summary separately.
Fixed
Adds a linked error summary to place and event forms so contributors can identify and reach every field that needs attention.
Prevents address lookup and duplicate-check responses from resetting Category or Operating status.
Publishes complete platform-administrator submissions atomically instead of leaving them behind a self-recusal message.
Operations
Backfills already-waiting platform-administrator submissions through the same reviewed revisions, canonical knowledge, support, notification, and audit commands used by normal moderation.
Keeps shorthand URL handling structural and SSRF-safe: links are normalized and validated without making arbitrary server-side requests to contributor-supplied hosts.
Known limitations
A correctly formatted website can later move, restrict access, or disappear; source availability and provenance therefore remain part of human review.
Version 1.5.8
Account controls that stay within reach
Account navigation now separates the dashboard link from the options menu, dashboard filters dismiss cleanly without retaining abandoned choices, and role-aware city actions stay concise and relevant.
Improved
Makes the member name in the global header open the dashboard directly while preserving a dedicated account-options control for touch and keyboard users.
Extends the desktop account-menu hover bridge through the space above the panel so the menu remains available while the pointer moves into it.
Shortens the selected city-follow state to Following and prevents the action label from wrapping.
Moves aggregate administrator account statistics into System readiness and links platform administrators there from Manage City.
Fixed
Closes the Community Pulse filter panel when the member clicks elsewhere or presses Escape and restores the last applied filter values instead of retaining abandoned selections.
Hides Request activation and Apply to Mod from administrators who already have authority to manage the city.
Operations
Keeps account statistics aggregate-only and administrator-restricted, with explicit labels for current accounts, verification, completed profiles, recent account creation, and restrictions.
Documents that recent-account counts measure growth; true daily, weekly, and monthly active-user analytics are not collected yet.
Known limitations
Daily, weekly, and monthly active-user analytics require a separate privacy-reviewed activity-measurement design; this release does not infer activity from sign-in or content timestamps.
Version 1.5.7
Your community, without the clutter
The member dashboard now opens directly on a compact Community Pulse, keeps destinations and personal tools in one clear Jump to menu, and adds one discovery view for events across a member’s home and followed cities.
New
Added a followed-city events hub with city, category, date, price, and accessibility filters plus a synchronized map centered on the member’s home city.
Added a compact account menu under the member name for profile, feed preferences, privacy and account data, blocked members, and sign-out controls.
Added author-controlled post deletion from Contributions, city feeds, the personalized dashboard feed, and dedicated post pages.
Improved
Replaced the dashboard welcome block and stacked introduction copy with a sticky Your Community Pulse header and a quieter filter control.
Rebuilt the left rail as a single Jump to navigation with the home city first, followed cities alphabetized, and direct links to Events, Contributions, Reputation, Saved, Preferences, and Feedback.
Reduced the right rail to the invitation workflow and removed its independent scrolling behavior.
Reframed Contributions as an author-focused post feed with clear Approved, Under review, Changes requested, Denied, and Draft verdicts.
Operations
Keeps member reports and their enforcement outcomes private while preserving the existing internal moderation and audit records.
Reframes appeals as one-way reconsideration requests without a public case tracker, response promise, or review timeline.
Uses the established audited withdrawal command for deletion so related comments, supports, saves, canonical-object support, and feed visibility change safely together.
Adds database-policy and responsive regression coverage for followed-city event discovery and author-only deletion controls.
Known limitations
The cross-city events map starts at the member’s home city and moves when the member selects an event; it does not automatically zoom out to span distant followed cities.
Deleting a post removes it from member-facing surfaces, but GoJumpingJack retains the minimum safety, moderation, and audit history required to operate the service.
A reconsideration request is acknowledged as received; GoJumpingJack contacts the member only when a decision is reversed or more information is required.
Version 1.5.6
City tools where the city lives
Gainesville’s selected hero now carries through to the homepage, city actions match the current intake state, Local’s Guide uses a scroll-safe three-panel map experience, and authorized administrators can maintain sourced city information directly from the city page.
New
Added a role-aware Manage City section that brings community review, city photos, team applications, launch readiness, and editorial work into the city itself.
Added a protected visual editor for The Vibe and Practical Info with required sources, future review dates, immutable revisions, optimistic locking, and an audit record.
Added category-specific map-marker colors and an icon legend for food, nightlife, arts, outdoors, family, sights, shopping, and community places.
Improved
Uses the selected Gainesville hero on the homepage pilot card and makes the entire image area open the pilot city.
Adds a translucent city-title panel over photographic heroes so the city name and status remain readable across light and dark images.
Places filters and the map legend on the left, the map in the center, and synchronized results on the right, with deliberate stacked layouts on smaller screens.
Moves Share into the city banner, keeps Apply to Mod available during formation, and removes Request Activation once premoderated contributions are open.
Rewrites the final activation checkpoint in plain language and links city administrators directly to the relevant operational section.
Fixed
Prevents ordinary page scrolling over Local’s Guide from unexpectedly zooming the map.
Removes rejected city-photo submissions from the active photo library while retaining the minimum audit record required for accountability.
Removes the redundant Share-page link, the duplicate Community Buzz contribution prompt, and the unneeded Verified City Geography label.
Keeps the homepage pilot layout within the viewport and preserves one top-level page heading.
Operations
Registers editorial command receipts with protected read-only maintenance and pauses editorial publication during maintenance windows.
Keeps city editorial publishing limited to platform administrators during Phase 1; city stewards retain their scoped community-review access.
Adds database, accessibility, desktop, tablet, mobile, and horizontal-overflow regression coverage for the new city workflows.
Known limitations
The editorial workspace publishes reviewed revisions immediately and is limited to platform administrators during Phase 1; a separate curator draft-and-approval workflow remains a later-phase enhancement.
A configured MapTiler key is still required for live map tiles. The synchronized list remains available when the map provider is unavailable.
Rejected city photos disappear from the active library and stored image objects are removed, but a minimal decision record remains for moderation and audit accountability.
Version 1.5.5
Faster approvals with a human thank-you
Every active contribution-approval queue now opens with an editable, contribution-specific thank-you message, while change requests, rejections, and declines require a fresh manual explanation before they can be submitted.
New
Added ready-to-send approval messages for original and external Community Buzz posts, places, events, factual updates, city photos, and city-team applications.
Added a separate safety-review approval message that explicitly preserves downstream rights, quality, relevance, and publication decisions.
Improved
Tailors each approval message to the contribution type, city, title, social platform, application track, or canonical-object action.
Keeps every approval message editable so reviewers can add useful context without writing routine acknowledgements from scratch.
Explains that accepted city-team applications record interest and fit without granting publishing, curation, or moderation authority.
Operations
Requires reviewers to deliberately switch into a manual negative-decision mode, which clears the canned approval text before a change request, rejection, or decline can be submitted.
Continues to store the final reviewer-edited message in the existing audit and author-visible outcome fields without adding a parallel decision record.
Approval messages reduce repetitive typing but do not replace source, rights, safety, duplication, disclosure, or conflict review.
Review-style local commentary is currently handled as an original GoJumpingJack post; a separate structured review object is planned for a later product phase.
City-photo selection and city activation remain separate administrative decisions after contribution approval.
Version 1.5.4
Reliable city photos and accountable invitations
Private city-photo review now delivers approved images through a reliable authenticated boundary, administrators can reject any stuck submission and request a fresh copy, compact phone footers no longer overlap, and members can invite others without sharing recipient contact details with GoJumpingJack.
New
Added private invitation links with native share, text, email-app, and copy options for the whole platform or a specific city.
Added transparent invitation metrics for link visits, verified joins, and qualified referrals without exposing recipient identities.
Added first-touch referral attribution that expires after 30 days and never treats a raw signup as a qualified referral.
Improved
Streams authorized city-photo review images through GoJumpingJack instead of relying on a temporary storage redirect.
Keeps city-photo rejection available when upload or safety processing is incomplete, unavailable, or rejected.
Moves the optional city link to a dedicated compact row on ordinary phone widths so it cannot overlap post actions.
Places invitation entry points on the member dashboard and each city’s context panel.
Fixed
Fixed approved private city photos appearing as broken images in the administrative review queue.
Fixed safety-unavailable city-photo records having no visible rejection or resubmission path.
Fixed city navigation colliding with comment and save controls on mobile post footers.
Operations
Requires an approved safety state before city-photo approval while allowing fail-closed rejection at every pending processing state.
Deletes rejected private storage objects on a best-effort audited cleanup path and keeps normal page refresh as the only preview reload behavior.
Rejects self-referrals, preserves one immutable inviter per referred member, and qualifies referrals only after seven days of activity or an approved substantive contribution.
Removes expired, unclaimed referral visits each night between 3:15 and 4:15 a.m. Eastern depending on daylight saving time.
Known limitations
Invitation links do not currently earn money, travel credit, prizes, or automatic reputation.
Native device sharing does not reveal which external app the member selected; GoJumpingJack records that channel only as native share.
A city photo remains private until safety processing succeeds and an administrator separately approves and selects it.
Version 1.5.3
Compact actions without losing your place
Community Buzz ratings now update in place, compact card footers keep city navigation and post actions together, external discussion links use a purpose-built icon, dark-mode embeds stay readable, and failed city-photo processing can be removed and retried without consuming the daily allowance.
Improved
Grouped Like, score, and Dislike into one outlined control with a stronger score color and a visible selected state.
Moved dashboard city navigation into the center of each post footer while preserving compact mobile reflow.
Colored original-post comment totals consistently with reaction totals.
Replaced the external discussion icon with the combined comment-and-open symbol supplied for GoJumpingJack.
Simplified the city Community rail to its name, Create Post, and Preferences.
Fixed
Ratings update optimistically and save through an authenticated server boundary without refreshing, scrolling, or moving the member back to the top.
Reduced action-row height and prevented post controls from wrapping on normal phone widths.
Gave isolated official embeds a light, high-contrast document surface so fallback X text remains readable in dark mode.
Made failed private city-photo attempts removable and stopped technical failures or withdrawals from consuming the three-per-day suggestion allowance.
Operations
Retained server-side authentication, request identifiers, ranking eligibility rules, and independent community-validation boundaries for every rating.
Added stage-specific private image-processing diagnostics without logging image data or rights details.
Kept failed city images private, removed their storage objects on withdrawal, and preserved an auditable withdrawn record.
Known limitations
External previews still depend on each provider's official service and may collapse to the attributed source card.
At phone widths below 370 pixels, the optional dashboard city link moves to its own compact footer row so all actions remain usable.
A city photo remains private until processing succeeds and an administrator separately approves and selects it.
Version 1.5.2
Posts without dead preview space
Unavailable external previews now disappear instead of producing oversized error regions, successful embeds remain height-bounded, and visible reaction totals include the author’s transparent endorsement without influencing independent community ranking.
Fixed
Collapsed the entire media region when an approved external preview is unavailable at request time or fails while rendering.
Removed Preview unavailable cards, repeated official-preview notices, and per-post Preview settings links from Community Buzz.
Prevented pending Meta previews from reserving a large blank region before availability is confirmed.
Kept successful provider embeds within provider-specific height limits without allowing failed media to dominate the post.
Improved
Made the visible reaction score include every active reaction, including the author’s default like.
Kept the author’s like visibly selected when the author views their published post.
Retained the compact canonical-source discussion action whenever media cannot be shown.
Operations
Separated the familiar visible reaction total from the ranking projection used by Popular, Trending, and community validation.
Kept self-reactions ineligible for rankings and validation while preserving the existing type-specific, idempotent publication-credit system.
Continued to prohibit scraping, screenshots, copied Meta media, or third-party proxy fallbacks when an official preview is refused.
Known limitations
Meta decides whether a particular Facebook or Instagram URL can render through its official service.
When Meta declines a post, GJJ shows the reviewed title, context, attribution, and source action without automatically copying an image.
Contributors may use separately authorized GJJ media where the contribution flow and media-rights confirmation permit it.
Version 1.5.1
A quieter, more visual Community Buzz
Community Buzz cards now put the post itself first with compact source, relationship, time, and action controls. Important notifications are easier to scan, account-level delivery choices live with other settings, and eligible public Facebook and Instagram posts can use Meta’s official preview service.
Improved
Replaced platform-name chips with recognizable source icons, including the GoJumpingJack kangaroo for original posts.
Moved author, relative time, source attribution, and relationship disclosures into a compact post header.
Condensed likes, dislikes, comments or source discussion, sharing, saving, and reporting into an accessible icon-led footer.
Replaced relationship text pills with verified or disclosure icons whose tooltips retain the full explanation.
Simplified the member dashboard by renaming Explore and removing the redundant account-status line.
Made the What’s New message dismissible with its close button, Escape, or the page backdrop without forcing members to scroll.
New
Added official tokenless Meta previews for eligible public Facebook and Instagram posts inside the isolated social-preview frame.
Added a visible author like when a member’s post is published.
Fixed
Removed empty Meta media-placeholder explanations from feed cards.
Reserved the notification inbox for decisions, requested changes, deadlines, and community events instead of routine submission and approval receipts.
Moved optional email-copy controls from the notification inbox into Account settings.
Operations
Author likes are stored for transparency but cannot influence rankings, community validation, or award points a second time.
Meta previews use only validated canonical URLs, bounded official oEmbed responses, reviewed SDK hosts, and the existing sandboxed frame.
Restricted, private, deleted, group-only, or unsupported Meta links remain attributed source cards without scraping or copied media.
Known limitations
Meta decides whether a particular public post is eligible for its official embed; unsupported group permalinks and restricted posts may remain text-only.
Loading a Meta preview contacts Meta under its platform and privacy terms. Signed-out visitors still choose before an external preview loads.
Routine submission and publication milestones remain visible in Your contributions rather than producing duplicate inbox entries.
Version 1.5.0
A responsive social home for every city
The member dashboard and city communities now keep the feed or guide at the center while navigation, filters, city context, events, and role-aware work adapt into useful side panels across desktop, tablet, and mobile.
New
Added a shared responsive social shell with desktop context rails and labeled compact panels for tablets and phones.
Added city-context and feed-reading guides without narrowing the purpose-built Local’s Guide and Events map/list workspaces.
Added reviewed member-supplied titles, source names, source types, and local summaries for Facebook, Instagram, and Threads link cards.
Improved
Moved the personalized Community Buzz feed to the visual center of the member dashboard.
Placed followed cities, upcoming events, and role-aware queue counts in a dedicated activity rail.
Kept account navigation close by while reducing the previous single-column card-wall feeling.
Preserved exact public-URL validation before any Meta-family source details may be submitted.
Operations
Marks Meta-family source text as member supplied and retains it in moderation provenance and audit history.
Prevents verified members from bypassing the new Meta context requirements through the older submission boundary.
Retains premoderation, global URL restrictions, duplicate prevention, disclosures, reports, external removal behavior, and safe preview settings.
Pins patched brace-expansion and minimatch toolchain releases after a new denial-of-service advisory affected development and release checks.
Known limitations
Facebook and Instagram remain attributed link cards; GoJumpingJack does not scrape, copy, or imply platform verification of member-supplied text or media.
Tablet and mobile rails use labeled expandable panels so the feed or map remains the primary surface.
The Local’s Guide and Events tabs retain their existing synchronized map/list layouts rather than adding a third generic rail.
Version 1.4.7
Compact X and Reddit previews
Reddit posts now use Reddit’s direct official frame instead of a refused nested frame, and rich social previews stay within compact provider-specific heights.
Fixed
Replaced Reddit’s broken nested widget with a direct, tightly allowlisted official Reddit frame.
Removed the resize feedback loop that could make X and other rich previews unnecessarily tall.
Added compact starting and maximum heights for X, Reddit, Threads, and Pinterest previews.
Operations
Limited application-page framing to GoJumpingJack and the exact embed.reddit.com host.
Kept Reddit isolated as a cross-origin sandbox while preventing Reddit code from executing inside GoJumpingJack’s same-origin preview wrapper.
Preserved lazy loading, no autoplay, no automatic sound, canonical URL validation, and source-link fallbacks.
Known limitations
Very long or media-heavy provider posts may scroll inside their compact preview instead of expanding the entire Community Buzz card.
Facebook and Instagram remain attributed link cards until GoJumpingJack completes Meta application approval.
A provider can remove, restrict, or change a post or its embed behavior at any time; every card retains its direct source link.
Version 1.4.6
Social previews load automatically
Approved social-media previews now load automatically for existing and new accounts, while members who prefer lighter browsing can select Click to preview.
Improved
Made lazy official previews the default for every existing and new GoJumpingJack account.
Replaced the opt-in control with a clearer Click to preview setting for members who want external cards to remain text-only until activated.
Applied the saved preference consistently in Community Buzz, the member dashboard, and authorized moderation queues.
Operations
Migrated existing stored preferences to automatic loading and changed the database default for future accounts.
Kept near-viewport loading, isolated rich embeds, no autoplay, no automatic sound, canonical URL validation, and source-link fallbacks unchanged.
Kept signed-out browsing in per-card mode because no account preference is available.
Known limitations
Facebook and Instagram remain attributed link cards until GoJumpingJack completes Meta application approval.
Automatic official previews contact the named external platform when a card approaches the screen; members can choose Click to preview in Feed preferences.
A provider can remove, restrict, label, or change a post at any time, so every preview retains a direct source-link fallback.
Version 1.4.5
Official media previews, with member control
Community Buzz can now show lightweight official media for YouTube, TikTok, and Bluesky plus isolated official post previews for X, Reddit, Threads, and Pinterest.
New
Added official YouTube, TikTok, and eligible Bluesky image previews without copying media into GoJumpingJack.
Added official X, Reddit, Threads, and Pinterest post previews inside isolated, sandboxed frames.
Added a member preference for loading external social-media previews and a one-card load option when the preference is off.
Improved
Shows the same provider preview during URL submission and after publication in Community Buzz.
Loads media only near the viewport, unloads distant rich previews, and never starts sound or video automatically.
Falls back to the attributed source card whenever a post is private, deleted, restricted, labelled sensitive, or temporarily unavailable.
Operations
Keeps canonical URL validation, premoderation, global URL blocks, relationship disclosures, and audit history unchanged.
Uses fixed official provider endpoints, strict media-host allowlists, response-size and timeout limits, isolated frame permissions, and a dedicated Content Security Policy.
Records the member's preview preference and first decision without storing provider HTML, scripts, thumbnails, or media in the application database.
Known limitations
Facebook and Instagram remain attributed link cards until GoJumpingJack completes Meta application approval; the platform does not scrape or copy their media.
A provider can remove, restrict, label, or change a post at any time, so every preview retains a direct source-link fallback.
Official rich previews contact the named external platform and may receive its cookies or tracking; members control automatic loading in Feed preferences.
Version 1.4.4
Useful titles when a platform stays quiet
External shares now ask for one short factual title only when an approved provider response cannot supply one, and successful submissions return members to the city they were helping.
Fixed
Replaced generic Facebook, Instagram, Pinterest, and provider-outage titles with a required member-supplied title or neutral factual description.
Covered the reported Facebook group permalink and Instagram post URL shapes explicitly.
Kept official and URL-derived titles server-owned so a member cannot replace trusted prefill data.
Improved
Returns a member to the city Community Buzz after submission, with a clear pending-review notice and room to contribute again.
Records whether a title came from approved provider metadata, the exact URL, or a reviewed member fallback for moderator clarity.
Gives every external card a provider-specific tint and edge while retaining its text source label, including X's black-and-white stripe.
Shows moderators whether an external share is ready for approval or exactly why approval is blocked before they act.
Operations
Preserved city premoderation, global URL restrictions, duplicate prevention, relationship disclosures, audit evidence, and idempotent submission behavior.
Verified the reported YouTube URL still returns its official title and channel through YouTube oEmbed; transient failures now use the same explicit title fallback rather than an ambiguous card.
Kept request-changes and rejection available when a provider, metadata-freshness, or global restriction gate prevents publication.
Known limitations
Meta no longer reliably supplies Instagram/Facebook thumbnail fields through its current oEmbed feature, so GoJumpingJack does not scrape or copy those images.
YouTube thumbnails and in-site playback remain disabled until the separate player privacy, Made for Kids, branding, and legal gates are complete.
A member-supplied fallback title is reviewed in city premoderation and is not represented as platform-verified metadata.
Version 1.4.3
Faster external sharing from one URL
Members now paste one exact public-post URL while GoJumpingJack prepares safe source details automatically for all nine supported platforms.
Improved
Removed the required source-title, source-account, and account-type questions from external sharing.
Added bounded official title and account prefills for YouTube, TikTok, Reddit, and Bluesky, with a resilient neutral fallback when a provider is unavailable.
Added URL-derived account attribution for supported X, Threads, Facebook, TikTok, and Bluesky URL shapes.
Operations
Moved prepared attribution behind the trusted server boundary so form tampering cannot replace source details.
Continued to discard provider HTML, scripts, thumbnails, media, comments, and engagement while preserving premoderation, disclosures, restrictions, reports, audit events, and the 180-day freshness lifecycle.
Known limitations
Instagram, some Facebook URL forms, and Pinterest use neutral provider cards until GoJumpingJack receives the applicable provider app approval.
Automatic source details do not prove that a post is accurate, authorized, available in every region, or endorsed by its platform; members confirm the public link and moderators review it.
Rich embeds and provider media remain disabled.
Version 1.4.2
External social links, safely opened
Members can now submit exact public-post links from all nine reviewed platforms as attributed outbound cards without copied media, provider scripts, or automatic embeds.
New
Opened YouTube, Instagram, Facebook, X, TikTok, Reddit, Bluesky, Threads, and Pinterest public-post links for city premoderation.
Added current URL recognition and canonicalization for each platform, including Threads.com and first-party YouTube share links.
Added submitter-entered source title, source account, and account type so every outbound card remains useful without scraping provider content.
Improved
External URL checks no longer wait on provider metadata services, reducing freezes and provider-outage failures.
Provider cards now distinguish submitter-entered attribution from provider-verified metadata and keep all discussion on the original platform.
Bluesky, Threads, and Pinterest now have reviewed source accents alongside the existing platform identities.
Operations
Kept global legal and unsafe URL blocks, per-city duplicate prevention, relationship disclosures, premoderation, reporting, audit events, and 180-day freshness intact.
Recorded provider-specific URL patterns, current official evidence, no-fetch boundaries, and an explicit rich-embed deferral.
Known limitations
Rich embeds, copied thumbnails, and in-site provider players remain disabled. They require separate provider-specific terms, privacy, tracking, removal, and technical approval.
Source titles and account names are provided by the submitting member and reviewed during premoderation; GoJumpingJack does not claim that a platform supplied or verified them.
Private posts, profiles, search pages, third-party shorteners, and redirect/share-only links are rejected.
Version 1.4.1
Clearer external-sharing readiness
External social sharing now states plainly when provider intake is closed instead of presenting a disabled URL checker that can look frozen.
Fixed
Removed the inactive preview control when no external provider is open for new submissions.
Changed unavailable buttons to use an unavailable cursor while preserving the waiting cursor only for work that is actually in progress.
Improved
External-share cards now disclose the temporary closure before members enter the contribution workflow.
Closed-provider reasons, including Reddit’s current terms and metadata gate, are visible automatically.
Members can move directly from the closed provider screen to an original GJJ post.
Known limitations
No external provider is open for new submissions yet. This patch clarifies the current state and does not bypass provider-specific privacy, safety, metadata, removal, quota, or terms review.
Version 1.4.0
A clearer city community
GoJumpingJack now explains itself more clearly, gives members a durable feedback path, treats events as first-class city knowledge, and makes supported external sharing safer.
New
About, Roadmap, Help, Contact & Trust, public role guides, and signed-in feedback.
A dedicated Events city section with accessible discovery views, saves, and calendar downloads.
Provider-aware external-share previews with canonical URLs, duplicate checks, and relationship disclosures.
Improved
Clearer settings completion routes, administrator account metrics, global navigation, policy coverage, and Closed Alpha language.
Native GJJ text rejects unsafe or disguised links and points members to the structured sharing path.
Operations
Private feedback and Help publication queues, provider capability evidence, URL restrictions, event-projection reconciliation, and an audited image-safety review queue.
Metadata-free image normalization and fail-closed hosted safety screening for contribution images, city visuals, and private feedback screenshots.
Known limitations
Feedback screenshots are available only while hosted image-safety processing is configured and healthy; uncertain results stay private for human review.
Weather, crowd prediction, heat maps, paid placement, monetary rewards, and ticket sales are not part of this release.
External providers remain disabled unless their current official metadata, privacy, quota, and terms evidence passes independently.
Version 1.3.5
A safer foundation for every release
GoJumpingJack can now pause community changes safely, show release notes, and verify that essential background work is healthy.
New
A public release archive and one-time What’s New message for signed-in members.
Protected maintenance notices that preserve account access, reports, appeals, and copyright intake.
Operations
Separate liveness and restricted readiness checks.
Audited worker schedules and run receipts for essential recurring processes.
Known limitations
Optional notification emails remain unavailable until their dedicated delivery worker is enabled; in-app notifications remain authoritative.
New public image processing remains fail-closed until the production safety adapter passes its release gate.
Version 1.3.4
Reliable account email delivery
Signup, verification, and recovery now report delivery failures honestly and provide administrators a safe incident queue.
Fixed
Corrected production account-email delivery and verification destinations.
Added safe rate-limit and provider-outage messaging without account enumeration.
Version 1.3.3
The first community feedback patch
City discovery, contribution limits, member feeds, city photos, address lookup, maps, and contribution freshness became clearer and safer.
Improved
Introduced the denser city experience, personalized dashboard feed, and followed-city navigation.
Added city-photo submissions, direct post images, contribution freshness, and address-assisted place entry.
Known limitations
Regional feed filters and automatic Active-to-Established city promotion remain deferred.
