Changelog

All notable changes to GO Shortener will be documented in this file following Semantic Versioning.

v1.0.0 - 2026-09-03

Added

• Pure Go Core: Initial public release of GO Shortener engineered with Go 1.22+ and modernc.org/sqlite.
• Ultra-Lightweight Footprint: Runtime memory footprint verified under 0.5 MB RAM on standard Ubuntu VPS.
• Embedded Frontend: HTML, CSS, and vanilla JS packaged directly into the binary via embed.FS.
• SSRF & Anti-Recursion Shield: Automated protection against RFC 1918 private subnets, loopbacks, cloud metadata (169.254.169.254), and self-domain redirects.
• Dual-Tier Quotas: 15 links / 24 hours for anonymous guests; 100 links / calendar month for registered users.
• Preserved Code Renewal: Expired links return HTTP 410 Gone and can be renewed by owners preserving the exact short code without consuming quota.
• Privacy Analytics: SHA-256 IP hashing before telemetry aggregation (devices, browsers, OS, and referrers).
• Hybrid Authentication: Native email/password with bcrypt cost 12 and Google OAuth via Firebase with automatic account linking.
• Cloudflare Turnstile: Drop-in CAPTCHA bot protection.
• Admin Portal (/admin): Real-time system telemetry, user timeouts (30s to 7d), permanent bans with bulk link deactivation, and abuse reports review queue.
• Security Audit Trails: Tamper-resistant access logs for intrusion attempts and authentication milestones.
• Zero-Compile CI/CD: GitHub Actions pipeline for automated linux/amd64 and linux/arm64 releases.
• Linux Deployment: Native systemd unit files and automated install.sh / uninstall.sh scripts.