chore(release): prepare v1.3.0

Author: Cod-e-Codes

.github/workflows/release.yml

@@ -6,9 +6,9 @@ on:
   workflow_dispatch:
     inputs:
       version:
-        description: 'Version to build (e.g., v1.2.0)'
+        description: 'Version to build (e.g., v1.3.0)'
         required: true
-        default: 'v1.2.0'
+        default: 'v1.3.0'
 
 permissions:
   contents: read

CHANGELOG.md

@@ -6,12 +6,17 @@ Narrative notes by release. Per-file binaries and assets: [GitHub releases](http
 
 On **`main`** only; not part of the latest tagged release until you tag and publish. Compare against the current tag on [GitHub releases](https://github.com/Cod-e-Codes/marchat/releases).
 
+## v1.3.0
+
+**Released 2026-07-06.** Since **[v1.2.0](https://github.com/Cod-e-Codes/marchat/releases/tag/v1.2.0)**; compare [`v1.2.0...v1.3.0`](https://github.com/Cod-e-Codes/marchat/compare/v1.2.0...v1.3.0). Commits: **`git log v1.2.0..v1.3.0 --oneline`**.
+
 - **Client**: ANSI-aware word-wrap for chat bodies; reaction aliases `thumbsup` / `thumbsdown` and `:unreact`, `:thumbsup`, `:thumbsdown`; when E2E is on and server search returns no matches, a `System` line notes ciphertext-only matching. **Charm v2:** Bubble Tea, Bubbles, and Lip Gloss on `charm.land/*/v2` (`tea.View`, `KeyPressMsg`, bubbles setters). Long URLs wrap at path boundaries; wrapped segments keep hyperlink style and OSC 8 `Style.Hyperlink` hrefs (ASCII hyphens); mouse click-to-open fallback ([#103](https://github.com/Cod-e-Codes/marchat/issues/103)). **Fix:** composer chrome, multiline keys, placeholder cursor, and scroll-to-tail follow; mouse wheel routes to the active viewport; help/DB overlays suppress typing, URL clicks, and read-receipt flush until closed; ephemeral `System` feedback uses the banner; reconnect backoff advances on failure; transcript notices, reactions, and read receipts stay channel-scoped; E2E paths do not log plaintext.
 - **Server**: Replay up to 50 visible messages on every handshake (including reconnect). **Fix:** Postgres boolean SQL for search, pin toggle, and pinned listing; MySQL `parseTime=true` when unset; outbound messages stamped to the sender's channel; typing, reactions, and read receipts channel-scoped; `:backup` SQLite-only; admin TUI mouse scroll on tabs and tables; `:cleardb` clears `user_message_state`.
 - **Plugins**: **Fix:** serialized plugin stdin writes so chat fan-out and command RPC cannot corrupt IPC lines.
 - **Docs**: **README**, **TESTING**, **ARCHITECTURE**, and **PROTOCOL** for channel stamping, reconnect, wrapped URL limitation ([#103](https://github.com/Cod-e-Codes/marchat/issues/103)), SQLite-only `:backup`, and plugin IPC; agent skills under `.cursor/skills/`.
 - **Tooling**: Project Agent skills and `.cursor/rules/marchat.mdc`; `.gitignore` tracks shared rules and skills.
 - **Dependencies**: **charm.land/bubbletea/v2** v2.0.8, **charm.land/bubbles/v2** v2.1.0, **charm.land/lipgloss/v2** v2.0.5 (replaces Charm v1); **github.com/charmbracelet/colorprofile** v0.4.3, **github.com/charmbracelet/x/ansi** v0.11.7, **github.com/lucasb-eyer/go-colorful** v1.4.0, **github.com/mattn/go-runewidth** v0.0.24. **github.com/jackc/pgx/v5** v5.10.0, **golang.org/x/crypto** v0.53.0, **golang.org/x/term** v0.44.0, **modernc.org/sqlite** v1.53.0.
+- **Packaging**: Version strings and URLs for **v1.3.0** in **install.ps1**, **install.sh**, **build-release.ps1**, **scripts/build-*.ps1/sh**, **README**, **SECURITY.md**, **.github/workflows/release.yml**, and **packaging/** (Homebrew, Scoop, winget **1.3.0** manifest set, Chocolatey, AUR). **SHA256** fields are **placeholders** (`000000...`) until replaced from published release zips (**PACKAGING.md**, **packaging/ci/render-release-manifests.sh**).
 
 ## v1.2.0
 

PACKAGING.md

@@ -58,7 +58,7 @@ Published tap: [homebrew-marchat](https://github.com/Cod-e-Codes/homebrew-marcha
 
 Upstream is [microsoft/winget-pkgs](https://github.com/microsoft/winget-pkgs). Maintainers use a fork, add `manifests/c/Cod-e-Codes/Marchat/<PackageVersion>/`, run `winget validate` on that folder, and open a PR. Package identifier: `Cod-e-Codes.Marchat`. The installer is a zip with `NestedInstallerType: portable` and two `PortableCommandAlias` entries for client and server. Microsoft may prompt first-time contributors to accept the CLA on the PR; follow the bot instructions there.
 
-Example template path in this repo: `packaging/winget/manifests/c/Cod-e-Codes/Marchat/1.2.0/` (duplicate the folder layout for new versions). Older **`1.0.0/`** and **`1.1.0/`** manifests may remain for reference; the current release templates target **v1.2.0** until the next bump.
+Example template path in this repo: `packaging/winget/manifests/c/Cod-e-Codes/Marchat/1.3.0/` (duplicate the folder layout for new versions). Older **`1.0.0/`**, **`1.1.0/`**, and **`1.2.0/`** manifests may remain for reference; the current release templates target **v1.3.0** until the next bump.
 
 **Checksums vs GitHub release timing:** Portable zip manifests embed SHA256. After you publish a release and the five platform zips exist on GitHub, run [`packaging/ci/render-release-manifests.sh`](packaging/ci/render-release-manifests.sh) with `RELEASE_TAG` set and copy `packaging-out/` into `packaging/` (and into your tap, bucket, winget fork, or AUR clone as needed) so local `winget validate`, `brew audit`, and `choco pack` match real bytes. The committed templates may carry placeholder hashes until that sync step.
 

README.md

@@ -7,7 +7,7 @@
 [![Go Version](https://img.shields.io/github/go-mod/go-version/Cod-e-Codes/marchat?logo=go)](https://go.dev/dl/)
 [![GitHub all releases](https://img.shields.io/github/downloads/Cod-e-Codes/marchat/total?logo=github)](https://github.com/Cod-e-Codes/marchat/releases)
 [![Docker Pulls](https://img.shields.io/docker/pulls/codecodesxyz/marchat?logo=docker)](https://hub.docker.com/r/codecodesxyz/marchat)
-[![Version](https://img.shields.io/badge/version-v1.2.0-blue)](https://github.com/Cod-e-Codes/marchat/releases/tag/v1.2.0)
+[![Version](https://img.shields.io/badge/version-v1.3.0-blue)](https://github.com/Cod-e-Codes/marchat/releases/tag/v1.3.0)
 
 A lightweight terminal chat with real-time messaging over WebSockets, optional E2E encryption, and a flexible plugin ecosystem. Built for developers who prefer the command line.
 
@@ -37,7 +37,7 @@ Both clients follow the same wire format documented in [PROTOCOL.md](PROTOCOL.md
 
 ## Release notes
 
-**Latest tagged release:** [v1.2.0](https://github.com/Cod-e-Codes/marchat/releases/tag/v1.2.0) (2026-06-06). Narrative history: [CHANGELOG.md](CHANGELOG.md). Assets and tags: [GitHub releases](https://github.com/Cod-e-Codes/marchat/releases).
+**Latest tagged release:** [v1.3.0](https://github.com/Cod-e-Codes/marchat/releases/tag/v1.3.0) (2026-07-06). Narrative history: [CHANGELOG.md](CHANGELOG.md). Assets and tags: [GitHub releases](https://github.com/Cod-e-Codes/marchat/releases).
 
 **`main` branch:** may include changes not yet in that tag (for example items under **Unreleased** in [CHANGELOG.md](CHANGELOG.md)). Feature descriptions elsewhere in this README match the tree you build from source; compare your binary’s `-doctor` / `-version` output to the release page when in doubt.
 
@@ -153,12 +153,12 @@ Tables created by the server (dialect-aware DDL for SQLite, PostgreSQL, and MySQ
 **Binary Installation:**
 ```bash
 # Linux (amd64)
-wget https://github.com/Cod-e-Codes/marchat/releases/download/v1.2.0/marchat-v1.2.0-linux-amd64.zip
-unzip marchat-v1.2.0-linux-amd64.zip && chmod +x marchat-*
+wget https://github.com/Cod-e-Codes/marchat/releases/download/v1.3.0/marchat-v1.3.0-linux-amd64.zip
+unzip marchat-v1.3.0-linux-amd64.zip && chmod +x marchat-*
 
 # macOS (amd64)
-wget https://github.com/Cod-e-Codes/marchat/releases/download/v1.2.0/marchat-v1.2.0-darwin-amd64.zip
-unzip marchat-v1.2.0-darwin-amd64.zip && chmod +x marchat-*
+wget https://github.com/Cod-e-Codes/marchat/releases/download/v1.3.0/marchat-v1.3.0-darwin-amd64.zip
+unzip marchat-v1.3.0-darwin-amd64.zip && chmod +x marchat-*
 
 # Windows - PowerShell
 iwr -useb https://raw.githubusercontent.com/Cod-e-Codes/marchat/main/install.ps1 | iex
@@ -184,11 +184,11 @@ See [PACKAGING.md](PACKAGING.md) and `packaging/` for Homebrew, Scoop, winget, C
 
 **Docker:**
 ```bash
-docker pull codecodesxyz/marchat:v1.2.0
+docker pull codecodesxyz/marchat:v1.3.0
 docker run -d -p 8080:8080 \
   -e MARCHAT_ADMIN_KEY=$(openssl rand -hex 32) \
   -e MARCHAT_USERS=admin1,admin2 \
-  codecodesxyz/marchat:v1.2.0
+  codecodesxyz/marchat:v1.3.0
 ```
 
 **Docker Compose (local development):**

SECURITY.md

@@ -2,12 +2,12 @@
 
 ## Supported Versions
 
-`marchat` is currently at **v1.2.0**.  
+`marchat` is currently at **v1.3.0**.  
 All security updates and fixes are applied to the `main` branch.
 
 | Version            | Supported |
 |--------------------|-----------|
-| v1.2.x (`main`)    | Yes       |
+| v1.3.x (`main`)    | Yes       |
 | v1.0.x             | Yes       |
 | v0.11.x            | No        |
 | v0.10.x            | No        |

build-release.ps1

@@ -1,9 +1,9 @@
-# Build script for marchat v1.2.0
+# Build script for marchat v1.3.0
 # This script builds all platform targets and creates release zips
 
 $ErrorActionPreference = "Stop"
 
-$VERSION = "v1.2.0"
+$VERSION = "v1.3.0"
 $BUILD_DIR = "build"
 $RELEASE_DIR = "release"
 

install.ps1

@@ -4,7 +4,7 @@
 # Supports Windows, Linux, macOS, and Android (via PowerShell Core)
 
 param(
-    [string]$Version = "v1.2.0"
+    [string]$Version = "v1.3.0"
 )
 
 $ErrorActionPreference = "Stop"

install.sh

@@ -5,7 +5,7 @@
 
 set -e  # Exit on any error
 
-VERSION="v1.2.0"
+VERSION="v1.3.0"
 
 # Detect OS and architecture
 OS=$(uname | tr '[:upper:]' '[:lower:]')

packaging/aur/.SRCINFO

@@ -1,16 +1,16 @@
 pkgbase = marchat-bin
 	pkgdesc = Terminal chat with WebSockets (official release binaries)
-	pkgver = 1.2.0
+	pkgver = 1.3.0
 	pkgrel = 1
 	url = https://github.com/Cod-e-Codes/marchat
 	arch = x86_64
 	arch = aarch64
 	license = MIT
 	depends = glibc
 	options = !strip
-	source_x86_64 = marchat-v1.2.0-linux-amd64.zip::https://github.com/Cod-e-Codes/marchat/releases/download/v1.2.0/marchat-v1.2.0-linux-amd64.zip
-	sha256sums_x86_64 = 818352b09e0b522aeb1d0d23f89adbab18e561727c9ef78bea93c90560c7d25a
-	source_aarch64 = marchat-v1.2.0-linux-arm64.zip::https://github.com/Cod-e-Codes/marchat/releases/download/v1.2.0/marchat-v1.2.0-linux-arm64.zip
-	sha256sums_aarch64 = 727198c2795f2928b78900ff3ea273dfb5fb97242093940ee812329616128beb
+	source_x86_64 = marchat-v1.3.0-linux-amd64.zip::https://github.com/Cod-e-Codes/marchat/releases/download/v1.3.0/marchat-v1.3.0-linux-amd64.zip
+	sha256sums_x86_64 = 0000000000000000000000000000000000000000000000000000000000000000
+	source_aarch64 = marchat-v1.3.0-linux-arm64.zip::https://github.com/Cod-e-Codes/marchat/releases/download/v1.3.0/marchat-v1.3.0-linux-arm64.zip
+	sha256sums_aarch64 = 0000000000000000000000000000000000000000000000000000000000000000
 
 pkgname = marchat-bin

packaging/aur/PKGBUILD

@@ -1,8 +1,8 @@
 # Maintainer: Cody Marsengill <cod.e.codes.dev@gmail.com>
 pkgname=marchat-bin
-pkgver=1.2.0
+pkgver=1.3.0
 pkgrel=1
-_pkgtag=v1.2.0
+_pkgtag=v1.3.0
 pkgdesc='Terminal chat with WebSockets (official release binaries)'
 arch=('x86_64' 'aarch64')
 url='https://github.com/Cod-e-Codes/marchat'
@@ -11,8 +11,8 @@ options=('!strip')
 depends=('glibc')
 source_x86_64=("marchat-${_pkgtag}-linux-amd64.zip::https://github.com/Cod-e-Codes/marchat/releases/download/${_pkgtag}/marchat-${_pkgtag}-linux-amd64.zip")
 source_aarch64=("marchat-${_pkgtag}-linux-arm64.zip::https://github.com/Cod-e-Codes/marchat/releases/download/${_pkgtag}/marchat-${_pkgtag}-linux-arm64.zip")
-sha256sums_x86_64=('818352b09e0b522aeb1d0d23f89adbab18e561727c9ef78bea93c90560c7d25a')
-sha256sums_aarch64=('727198c2795f2928b78900ff3ea273dfb5fb97242093940ee812329616128beb')
+sha256sums_x86_64=('0000000000000000000000000000000000000000000000000000000000000000')
+sha256sums_aarch64=('0000000000000000000000000000000000000000000000000000000000000000')
 
 package() {
   if [[ $CARCH == x86_64 ]]; then