From 09dc4ea3f59082e85ae46ce6b3a808d7fb57bb38 Mon Sep 17 00:00:00 2001
From: Ricardo <rick@rmendes.net>
Date: Wed, 25 Mar 2026 07:43:25 +0100
Subject: [PATCH] chore: bump version to 3.9.0
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Security audit remediation, architecture refactors, performance
improvements, and UI/UX fixes. Breaking: OAuth client secrets are
now hashed — existing apps must re-register.
---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index e1f150a..2a4b45f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-activitypub",
-  "version": "3.8.7",
+  "version": "3.9.0",
   "description": "ActivityPub federation endpoint for Indiekit via Fedify. Adds full fediverse support: actor, inbox, outbox, followers, following, syndication, and Mastodon migration.",
   "keywords": [
     "indiekit",