Hashavatar API 1.0.0

[eldryoth]

hashavatar-api 1.0.0

Stable 1.0 release of the public Hashavatar API and demo site.

Highlights

• Updated to hashavatar crate 1.0.0.
• Finalized the API/demo site for SHA-512 + WebP avatar generation.
• Added stricter security handling for rate limiting, forwarded IPs, storage links, and Open Graph rendering.
• Open Graph PNG generation now runs off the async executor with timeout protection.
• Direct persist=true avatar requests now use the stricter storage rate limit.
• Signed storage link responses return a hashed cache key instead of the raw identity-bearing cache key.
• Updated Wolfi container deployment and hardened the Podman Compose example.
• Refreshed dependencies, including direct lru 0.18.0.
• Updated documentation, security controls, and release metadata for 1.0.0.

Verification

• CI green before tagging.
• Local release gate passed.
• Local Wolfi image smoke test passed.

---

This discussion was created from the release Hashavatar API 1.0.0.