Atproto: @atproto/[email protected] Release

Release date:
November 14, 2025
Previous version:
@atproto/[email protected] (released November 5, 2025)
Magnitude:
43 Diff Delta
Contributors:
3 total committers
Data confidence:
Commits:

Top Contributors in @atproto/[email protected]

github-actions[bot]
ThisIsMissEm
mistydemeo

Directory Browser for @atproto/[email protected]

All files are compared to previous version, @atproto/[email protected]. Click here to browse diffs between other versions.

Loading File Browser...

Release Notes Published

Patch Changes

  • #4333 f8e56b387 Thanks @ThisIsMissEm! - Prevent usage of DPoP bound access tokens with bsky.social

    Using DPoP bound access tokens against the bsky server would already fail, but it would fail with a rather misleading error: "InvalidToken: Bad token scope", because the scope on a DPoP bound access token is the actual OAuth scopes, not the expected com.atproto.access string.

    This change means the entryway explicit checks if the token is a DPoP bound access token, and if it is, then it fails with an error "Malformed token: DPoP not supported". A similar check is also done with Bearer tokens in the PDS.

  • #4330 3628cebfb Thanks @mistydemeo! - adjust explicit-slurs regex