chore: prepare v0.9.0-beta.6 release

Rebuild to address Go stdlib CVEs (CVE-2026-25679, CVE-2026-27142, CVE-2026-27139) by picking up Go 1.25.8. Includes x/crypto 0.49.0 and sqlite 1.46.1 dependency bumps already on main.

Author: Cod-e-Codes

.github/workflows/release.yml

@@ -6,9 +6,9 @@ on:
   workflow_dispatch:
     inputs:
       version:
-        description: 'Version to build (e.g., v0.9.0-beta.5)'
+        description: 'Version to build (e.g., v0.9.0-beta.6)'
         required: true
-        default: 'v0.9.0-beta.5'
+        default: 'v0.9.0-beta.6'
 
 permissions:
   contents: read

README.md

@@ -7,22 +7,18 @@
 [![Go Version](https://img.shields.io/github/go-mod/go-version/Cod-e-Codes/marchat?logo=go)](https://go.dev/dl/)
 [![GitHub all releases](https://img.shields.io/github/downloads/Cod-e-Codes/marchat/total?logo=github)](https://github.com/Cod-e-Codes/marchat/releases)
 [![Docker Pulls](https://img.shields.io/docker/pulls/codecodesxyz/marchat?logo=docker)](https://hub.docker.com/r/codecodesxyz/marchat)
-[![Version](https://img.shields.io/badge/version-v0.9.0--beta.5-blue)](https://github.com/Cod-e-Codes/marchat/releases/tag/v0.9.0-beta.5)
+[![Version](https://img.shields.io/badge/version-v0.9.0--beta.6-blue)](https://github.com/Cod-e-Codes/marchat/releases/tag/v0.9.0-beta.6)
 
 A lightweight terminal chat with real-time messaging over WebSockets, optional E2E encryption, and a flexible plugin ecosystem. Built for developers who prefer the command line.
 
 ## Latest Updates
 
-### v0.9.0-beta.5 (Current)
-- **Automated Releases**: New GitHub Actions workflow for matrix builds across all platforms with multi-arch Docker support ([@alexandzors](https://github.com/alexandzors))
-- **Security**: Replaced SHA256 with PBKDF2 for keystore key derivation
-- **JWT Secret**: Auto-generated JWT secret with persistence via interactive setup ([@aleksen](https://github.com/aleksen))
-- **Bug Fixes**: Fixed race conditions, error handling, WebSocket origin check, and doc inaccuracies
-- **Docker**: Added `.dockerignore` and optimized Dockerfile layer caching
-- **CI**: Enabled race detector in CI test step
-- **Dependencies**: Bumped `charmbracelet/bubbles` to 1.0.0, `modernc.org/sqlite` to 1.45.0, `golang.org/x/crypto` to 0.48.0; Go 1.25
+### v0.9.0-beta.6 (Current)
+- **Security**: Rebuilt with Go 1.25.8 to address CVE-2026-25679, CVE-2026-27142, CVE-2026-27139
+- **Dependencies**: Bumped `golang.org/x/crypto` from 0.48.0 to 0.49.0, `modernc.org/sqlite` to 1.46.1
 
 ### Recent Releases
+- **v0.9.0-beta.5**: Automated release workflow, PBKDF2 keystore key derivation, JWT secret auto-generation, race condition fixes, Docker optimizations
 - **v0.9.0-beta.4**: Fixed admin metrics, restored plugin commands in encrypted sessions, dependency updates
 - **v0.9.0-beta.3**: Added :q quit command, improved theme handling, ESC behavior tweaks, and better database backups
 - **v0.9.0-beta.2**: Database performance improvements, documentation enhancements, dependency updates
@@ -116,24 +112,24 @@ Key tables for message tracking and moderation:
 **Binary Installation:**
 ```bash
 # Linux (amd64)
-wget https://github.com/Cod-e-Codes/marchat/releases/download/v0.9.0-beta.5/marchat-v0.9.0-beta.5-linux-amd64.zip
-unzip marchat-v0.9.0-beta.5-linux-amd64.zip && chmod +x marchat-*
+wget https://github.com/Cod-e-Codes/marchat/releases/download/v0.9.0-beta.6/marchat-v0.9.0-beta.6-linux-amd64.zip
+unzip marchat-v0.9.0-beta.6-linux-amd64.zip && chmod +x marchat-*
 
 # macOS (amd64)
-wget https://github.com/Cod-e-Codes/marchat/releases/download/v0.9.0-beta.5/marchat-v0.9.0-beta.5-darwin-amd64.zip
-unzip marchat-v0.9.0-beta.5-darwin-amd64.zip && chmod +x marchat-*
+wget https://github.com/Cod-e-Codes/marchat/releases/download/v0.9.0-beta.6/marchat-v0.9.0-beta.6-darwin-amd64.zip
+unzip marchat-v0.9.0-beta.6-darwin-amd64.zip && chmod +x marchat-*
 
 # Windows - PowerShell
 iwr -useb https://raw.githubusercontent.com/Cod-e-Codes/marchat/main/install.ps1 | iex
 ```
 
 **Docker:**
 ```bash
-docker pull codecodesxyz/marchat:v0.9.0-beta.5
+docker pull codecodesxyz/marchat:v0.9.0-beta.6
 docker run -d -p 8080:8080 \
   -e MARCHAT_ADMIN_KEY=$(openssl rand -hex 32) \
   -e MARCHAT_USERS=admin1,admin2 \
-  codecodesxyz/marchat:v0.9.0-beta.5
+  codecodesxyz/marchat:v0.9.0-beta.6
 ```
 
 **From Source:**

SECURITY.md

@@ -2,7 +2,7 @@
 
 ## Supported Versions
 
-`marchat` is currently at **v0.9.0-beta.5**.  
+`marchat` is currently at **v0.9.0-beta.6**.  
 All security updates and fixes are applied to the `main` branch.
 
 | Version            | Supported |

build-release.ps1

@@ -1,9 +1,9 @@
-# Build script for marchat v0.9.0-beta.5
+# Build script for marchat v0.9.0-beta.6
 # This script builds all platform targets and creates release zips
 
 $ErrorActionPreference = "Stop"
 
-$VERSION = "v0.9.0-beta.5"
+$VERSION = "v0.9.0-beta.6"
 $BUILD_DIR = "build"
 $RELEASE_DIR = "release"
 

install.ps1

@@ -4,7 +4,7 @@
 # Supports Windows, Linux, macOS, and Android (via PowerShell Core)
 
 param(
-    [string]$Version = "v0.9.0-beta.5"
+    [string]$Version = "v0.9.0-beta.6"
 )
 
 $ErrorActionPreference = "Stop"

install.sh

@@ -5,7 +5,7 @@
 
 set -e  # Exit on any error
 
-VERSION="v0.9.0-beta.5"
+VERSION="v0.9.0-beta.6"
 
 # Detect OS and architecture
 OS=$(uname | tr '[:upper:]' '[:lower:]')