YourBot v0.0.24
Added
- A public changelog at /changelog. Every release with its full notes, a page per version and a feed at /changelog.xml. The page refreshes itself when a new release lands, so reading what shipped no longer requires a dashboard account.
Changed
- Moderation risk scores now fade as cases age instead of holding at their highest point forever. A member who stopped causing trouble drops back down on their own, and every staff screen shows the current score rather than a past peak.
- Members placed on the watchlist automatically are released once their risk falls back into the safe range. Watchlist entries added by your staff are never cleared automatically.
- An automatic watchlist entry no longer adds to the risk score that created it, so a member can no longer be held in a band by the flag that band raised.
Enhanced
- The AI plugin builder now works from a corrected reference. Over a hundred errors were fixed in the guidance it follows, covering scheduled tasks, storage, event data, interaction timing and dashboard settings, so a generated plugin is far more likely to run correctly on the first build.
- Plugin validation now checks your calls into the platform API and your SQL statements before you publish. Mistakes that used to surface as a crash on a live server are caught at validation time.
Fixed
- /ban returned a generic error when the target was not currently in the server. Banning someone who already left, or banning ahead of time by user ID, now works.
- Plugins listening for edited messages, member updates, channel updates or role updates received an empty payload on the shared bot. All four events now arrive with their details.
Security
- Marketplace: a plugin icon link could carry markup that ran for anyone browsing the public storefront. Icon links are now validated on save and the storefront escapes them correctly.
- Group Finder: a partnered server's name could break out of the network page it was listed on.
- Data exports: cell values are now neutralized so a spreadsheet cannot treat exported text as a formula when the file is opened.
- Server names carrying invisible or control characters are cleaned when we first see them, so a server can no longer disguise how it appears in lists.