chore: release v1.7.82-alpha

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## v1.7.82-alpha (2026-05-22)
+
+- Saleor storefront proxying now forwards `X-Forwarded-Host`, fixing Next.js Server Actions requests that compared the browser origin with the internal `storefront-app:3000` upstream host.
+- Saleor storefront media now routes `/thumbnail/` and `/media/` through the same `9011` proxy to the Saleor API, fixing product image optimizer failures caused by `localhost:8000` media URLs.
+- The Saleor storefront container receives an explicit internal media origin so rewritten media URLs resolve inside the Podman network without exposing private API ports to browsers.
+- Validation passed with `cargo fmt --all --check --manifest-path core/Cargo.toml`, `cargo check -p archipelago --manifest-path core/Cargo.toml`, and live checks on `100.114.134.21` for storefront HTML, static assets, GraphQL, media redirects, and optimized product images.
+
 ## v1.7.81-alpha (2026-05-21)
 
 - Saleor storefront installs now use the prebuilt registry image instead of building the Next.js app on-device, avoiding Podman build failures during stack installation.

core/archipelago/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "archipelago"
-version = "1.7.81-alpha"
+version = "1.7.82-alpha"
 edition = "2021"
 description = "Archipelago Bitcoin Node OS - Native backend"
 authors = ["Archipelago Team"]

core/archipelago/src/api/rpc/package/stacks.rs

@@ -581,6 +581,8 @@ fn saleor_storefront_app_command() -> tokio::process::Command {
         "-e",
         "NEXT_PUBLIC_SALEOR_API_URL=http://api:8000/graphql/",
         "-e",
+        "NEXT_PUBLIC_SALEOR_MEDIA_URL=http://api:8000/",
+        "-e",
         "NEXT_PUBLIC_STOREFRONT_URL=http://localhost:9011",
         "-e",
         "NEXT_PUBLIC_DEFAULT_CHANNEL=default-channel",
@@ -2300,6 +2302,7 @@ server {
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Host $host;
     proxy_set_header X-Forwarded-Proto $scheme;
 
     location ^~ /graphql/ {
@@ -2309,6 +2312,20 @@ server {
         proxy_set_header Origin "";
     }
 
+    location ^~ /thumbnail/ {
+        set $saleor_media http://api:8000$request_uri;
+        proxy_pass $saleor_media;
+        proxy_set_header Host api;
+        proxy_set_header Origin "";
+    }
+
+    location ^~ /media/ {
+        set $saleor_media http://api:8000$request_uri;
+        proxy_pass $saleor_media;
+        proxy_set_header Host api;
+        proxy_set_header Origin "";
+    }
+
     location / {
         set $saleor_storefront_app http://storefront-app:3000;
         proxy_pass $saleor_storefront_app;

neode-ui/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "neode-ui",
-  "version": "1.7.81-alpha",
+  "version": "1.7.82-alpha",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "neode-ui",
-      "version": "1.7.81-alpha",
+      "version": "1.7.82-alpha",
       "dependencies": {
         "@types/dompurify": "^3.0.5",
         "@vue-leaflet/vue-leaflet": "^0.10.1",

neode-ui/package.json

@@ -1,7 +1,7 @@
 {
   "name": "neode-ui",
   "private": true,
-  "version": "1.7.81-alpha",
+  "version": "1.7.82-alpha",
   "type": "module",
   "scripts": {
     "start": "./start-dev.sh",

release-manifest.json

@@ -1,28 +1,28 @@
 {
-  "version": "1.7.81-alpha",
-  "release_date": "2026-05-21",
+  "version": "1.7.82-alpha",
+  "release_date": "2026-05-22",
   "changelog": [
-    "Saleor storefront installs now use the prebuilt registry image instead of building the Next.js app on-device, avoiding Podman build failures during stack installation.",
-    "Existing Saleor stacks are repaired on adoption by recreating missing storefront containers, forcing the storefront app to bind `0.0.0.0:3000`, and resolving nginx upstreams dynamically after container restarts.",
-    "The shipped Saleor storefront image now includes public assets and omits Vercel-only Speed Insights injection, fixing broken static asset responses and the local `/_vercel/speed-insights/script.js` browser warning.",
-    "Validation passed with `cargo fmt --all --check --manifest-path core/Cargo.toml`, `cargo check -p archipelago --manifest-path core/Cargo.toml`, and live checks on `100.114.134.21` for `9011` storefront, static assets, and proxied GraphQL."
+    "Saleor storefront proxying now forwards `X-Forwarded-Host`, fixing Next.js Server Actions requests that compared the browser origin with the internal `storefront-app:3000` upstream host.",
+    "Saleor storefront media now routes `/thumbnail/` and `/media/` through the same `9011` proxy to the Saleor API, fixing product image optimizer failures caused by `localhost:8000` media URLs.",
+    "The Saleor storefront container receives an explicit internal media origin so rewritten media URLs resolve inside the Podman network without exposing private API ports to browsers.",
+    "Validation passed with `cargo fmt --all --check --manifest-path core/Cargo.toml`, `cargo check -p archipelago --manifest-path core/Cargo.toml`, and live checks on `100.114.134.21` for storefront HTML, static assets, GraphQL, media redirects, and optimized product images."
   ],
   "components": [
     {
       "name": "archipelago",
-      "current_version": "1.7.81-alpha",
-      "new_version": "1.7.81-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.81-alpha/archipelago",
-      "sha256": "82ba94b4e4494a4a67506e3516c34e0f874630efae2d673c70852da9f94144e7",
-      "size_bytes": 43109024
+      "current_version": "1.7.82-alpha",
+      "new_version": "1.7.82-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.82-alpha/archipelago",
+      "sha256": "d03ef4ab8a2c01fa5c6e98e4f1acf0e39fecfa260bb0c47cbe01405c5ed5a70d",
+      "size_bytes": 43118248
     },
     {
-      "name": "archipelago-frontend-1.7.81-alpha.tar.gz",
-      "current_version": "1.7.81-alpha",
-      "new_version": "1.7.81-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.81-alpha/archipelago-frontend-1.7.81-alpha.tar.gz",
-      "sha256": "69ec4df6c1f77cbbacc6ea8dc8e2e40cbb50cf61b032825c7de520c72960afba",
-      "size_bytes": 166484929
+      "name": "archipelago-frontend-1.7.82-alpha.tar.gz",
+      "current_version": "1.7.82-alpha",
+      "new_version": "1.7.82-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.82-alpha/archipelago-frontend-1.7.82-alpha.tar.gz",
+      "sha256": "be53e82383c3a8480ae9d45870ebe8ab47f6b07e90b16202cba1ee97530364b0",
+      "size_bytes": 166485959
     }
   ]
 }

releases/manifest.json

@@ -1,28 +1,28 @@
 {
-  "version": "1.7.81-alpha",
-  "release_date": "2026-05-21",
+  "version": "1.7.82-alpha",
+  "release_date": "2026-05-22",
   "changelog": [
-    "Saleor storefront installs now use the prebuilt registry image instead of building the Next.js app on-device, avoiding Podman build failures during stack installation.",
-    "Existing Saleor stacks are repaired on adoption by recreating missing storefront containers, forcing the storefront app to bind `0.0.0.0:3000`, and resolving nginx upstreams dynamically after container restarts.",
-    "The shipped Saleor storefront image now includes public assets and omits Vercel-only Speed Insights injection, fixing broken static asset responses and the local `/_vercel/speed-insights/script.js` browser warning.",
-    "Validation passed with `cargo fmt --all --check --manifest-path core/Cargo.toml`, `cargo check -p archipelago --manifest-path core/Cargo.toml`, and live checks on `100.114.134.21` for `9011` storefront, static assets, and proxied GraphQL."
+    "Saleor storefront proxying now forwards `X-Forwarded-Host`, fixing Next.js Server Actions requests that compared the browser origin with the internal `storefront-app:3000` upstream host.",
+    "Saleor storefront media now routes `/thumbnail/` and `/media/` through the same `9011` proxy to the Saleor API, fixing product image optimizer failures caused by `localhost:8000` media URLs.",
+    "The Saleor storefront container receives an explicit internal media origin so rewritten media URLs resolve inside the Podman network without exposing private API ports to browsers.",
+    "Validation passed with `cargo fmt --all --check --manifest-path core/Cargo.toml`, `cargo check -p archipelago --manifest-path core/Cargo.toml`, and live checks on `100.114.134.21` for storefront HTML, static assets, GraphQL, media redirects, and optimized product images."
   ],
   "components": [
     {
       "name": "archipelago",
-      "current_version": "1.7.81-alpha",
-      "new_version": "1.7.81-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.81-alpha/archipelago",
-      "sha256": "82ba94b4e4494a4a67506e3516c34e0f874630efae2d673c70852da9f94144e7",
-      "size_bytes": 43109024
+      "current_version": "1.7.82-alpha",
+      "new_version": "1.7.82-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.82-alpha/archipelago",
+      "sha256": "d03ef4ab8a2c01fa5c6e98e4f1acf0e39fecfa260bb0c47cbe01405c5ed5a70d",
+      "size_bytes": 43118248
     },
     {
-      "name": "archipelago-frontend-1.7.81-alpha.tar.gz",
-      "current_version": "1.7.81-alpha",
-      "new_version": "1.7.81-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.81-alpha/archipelago-frontend-1.7.81-alpha.tar.gz",
-      "sha256": "69ec4df6c1f77cbbacc6ea8dc8e2e40cbb50cf61b032825c7de520c72960afba",
-      "size_bytes": 166484929
+      "name": "archipelago-frontend-1.7.82-alpha.tar.gz",
+      "current_version": "1.7.82-alpha",
+      "new_version": "1.7.82-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.82-alpha/archipelago-frontend-1.7.82-alpha.tar.gz",
+      "sha256": "be53e82383c3a8480ae9d45870ebe8ab47f6b07e90b16202cba1ee97530364b0",
+      "size_bytes": 166485959
     }
   ]
 }