Release v1.0.3

.github/workflows/ci.yml

@@ -10,9 +10,9 @@ jobs:
   unit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: npm
@@ -26,9 +26,9 @@ jobs:
   e2e:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: npm
@@ -39,7 +39,7 @@ jobs:
 
       - run: npm run test:e2e
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: failure()
         with:
           name: playwright-report

CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to WebWordStar are documented here. The format follows
 release branches (see `CLAUDE.md`). Nothing is tagged until a `release/vX.Y.Z` branch
 merges to `main`.
 
+## [1.0.3] — 2026-07-05
+
+Dependency maintenance — no editor or server behavior changes.
+
+### Changed
+
+- Dev toolchain majors via Dependabot: TypeScript 5→6, Vite 5→8, Vitest 2→4,
+  `@types/node` 20→26, tsx 4.22→4.23.
+- CI actions: `actions/checkout` 4→7, `actions/setup-node` 4→6,
+  `actions/upload-artifact` 4→7.
+
 ## [1.0.2] — 2026-07-05
 
 Launch preparation — an opt-in demo mode for publicly hosted instances, plus

CLAUDE.md

@@ -2,7 +2,7 @@
 
 A clean-room, browser-based reimplementation of **WordStar** for the modern era — faithful to the original keyboard-first interface (the diamond cursor, `^K` block commands, `^Q` quick commands, dot commands), extended with real-time multiuser collaborative editing over WebSockets. Built by the author of [WebBaseIII](https://github.com/DDecoene/WebBaseIII).
 
-> **Status:** **v1.0.1 released 2026-07-05** (tagged, AGPL-3.0-only). Current work: `release/v1.0.2` — launch prep: opt-in demo mode for publicly hosted instances (`WWS_DEMO=1`: idle-document wipe, per-IP rate limits, connection caps) and README polish. Shipped in v1.0.1: open-source repo improvements (devcontainer + Codespaces, issue templates, deployment docs, SECURITY.md, Dependabot). Shipped in v1.0.0: the editor core (diamond, `^Q`, `^V`, editing), `^K` block commands, arrow-key alternates, always-saved persistence (WebSocket + SQLite), the editor core remainder — word wrap + `^B` reflow, ruler/flag column, the full `^O`/`^P` menus, self-revealing menus, help levels, undo/redo, and block move — layout dot commands with full on-screen pagination, print/export (PDF/HTML/Markdown/text via `^K P`), and documents in/out — a seeded `/demo` document, native WordStar-text export (`^K P` W), and import of plain text/native/WordStar 3.x/4 files (`^K R`), and real-time collaboration — server-authoritative edit intents with revisions and positional transform, peer cursors with presence, own-edits-only undo. v1.0.0 is feature-complete. See [Roadmap](#roadmap) and `CHANGELOG.md`.
+> **Status:** **v1.0.2 released 2026-07-05** (tagged, AGPL-3.0-only). Current work: `release/v1.0.3` — dependency maintenance (Dependabot majors: TypeScript 6, Vite 8, Vitest 4; CI action bumps). Shipped in v1.0.2: opt-in demo mode for publicly hosted instances (`WWS_DEMO=1`: idle-document wipe, per-IP rate limits, connection caps) and README polish. Shipped in v1.0.1: open-source repo improvements (devcontainer + Codespaces, issue templates, deployment docs, SECURITY.md, Dependabot). Shipped in v1.0.0: the editor core (diamond, `^Q`, `^V`, editing), `^K` block commands, arrow-key alternates, always-saved persistence (WebSocket + SQLite), the editor core remainder — word wrap + `^B` reflow, ruler/flag column, the full `^O`/`^P` menus, self-revealing menus, help levels, undo/redo, and block move — layout dot commands with full on-screen pagination, print/export (PDF/HTML/Markdown/text via `^K P`), and documents in/out — a seeded `/demo` document, native WordStar-text export (`^K P` W), and import of plain text/native/WordStar 3.x/4 files (`^K R`), and real-time collaboration — server-authoritative edit intents with revisions and positional transform, peer cursors with presence, own-edits-only undo. v1.0.0 is feature-complete. See [Roadmap](#roadmap) and `CHANGELOG.md`.
 
 ## Git conventions
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "webwordstar",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "A clean-room browser-based reimplementation of WordStar with real-time collaborative editing.",
   "license": "AGPL-3.0-only",
   "type": "module",