release: v12.6.0

Author: Innei

apps/core/CHANGELOG.md

@@ -1,6 +1,15 @@
 # CHANGELOG
 
 
+# [12.6.0](https://github.com/mx-space/core/compare/v12.5.4...v12.6.0) (2026-05-15)
+
+
+### Features
+
+* **enrichment:** harden Open Graph browser mode against anti-bot pages ([#2724](https://github.com/mx-space/core/issues/2724)) ([383e0e4](https://github.com/mx-space/core/commit/383e0e4e1977873025f1385c81eeb3927b91246f))
+* **enrichment:** keep og-parser image OG-strict with dimensions ([8651e5c](https://github.com/mx-space/core/commit/8651e5c24e73c0459625e069d3e0a3c56b8e4153))
+
+
 ## <small>12.5.4 (2026-05-14)</small>
 
 * release: v12.5.4 ([02aafdf](https://github.com/mx-space/core/commit/02aafdf))

apps/core/RELEASE_NOTES.md

@@ -1,11 +1,19 @@
 ## TL;DR
 
-Updates the bundled admin dashboard to v7.2.0; no server-side functional changes ship in this release.
+This release hardens Open Graph enrichment: link cards now skip anti-bot challenge pages and stop rendering favicons in place of real preview images.
+
+## Highlights
+
+Open Graph browser mode now resists anti-bot defenses. Every agent-browser fetch carries a realistic user agent and language headers, waits for network idle instead of a fixed delay, and inspects the main document's HTTP status. Cloudflare and Akamai challenge pages are detected by signature and retried once; a persistent block surfaces as a distinct error instead of being cached as valid HTML.
+
+The Open Graph parser is now strict about preview images. The `image` field holds only a genuine `og:image` or `twitter:image`, so link cards no longer drop a square favicon into a wide image slot. Image dimensions are parsed from `og:image:width` and `og:image:height`, and any discovered icons move to the result's `links` collection.
 
 ## Changes
 
-- Bumped the pinned mx-admin dashboard from `7.1.7` to `7.2.0`. See the [mx-admin v7.2.0 release notes](https://github.com/mx-space/mx-admin/releases/tag/v7.2.0) for what changed in the admin UI itself.
+### Features
+- Open Graph browser mode detects and skips Cloudflare/Akamai challenge pages, sends realistic browser headers, and waits for network idle — preventing anti-bot interstitials and HTTP 4xx/5xx error pages from being cached as page content. ([#2724](https://github.com/mx-space/core/pull/2724))
+- The Open Graph parser keeps the `image` field strictly to real `og:image`/`twitter:image` values, parses image dimensions from OG width/height tags, and relocates favicons and link icons into `links`. ([8651e5c](https://github.com/mx-space/core/commit/8651e5c24e73c0459625e069d3e0a3c56b8e4153))
 
 ---
 
-**Full Changelog**: https://github.com/mx-space/core/compare/v12.5.2...v12.5.3
+**Full Changelog**: https://github.com/mx-space/core/compare/v12.5.4...v12.6.0

apps/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mx-space/core",
-  "version": "12.5.4",
+  "version": "12.6.0",
   "type": "module",
   "private": true,
   "engines": {