Bump to v0.12.7 — fix NIP-96 upload endpoints, block SVG uploads

.github/workflows/release.yml

@@ -69,13 +69,11 @@ jobs:
 
             > **Windows note:** The installer is not yet code-signed. Windows SmartScreen will show an "Unknown publisher" warning — click "More info → Run anyway" to install.
 
-            ### v0.12.6 — DM Polish & Image Fixes
+            ### v0.12.7 — Upload Fixes
 
-            - **Clickable links in DMs** — URLs, nostr entities, and images now render properly inside direct messages; images show inline, links open in browser
-            - **Multi-image upload fix** — selecting multiple images in the article editor now inserts all of them (previously only the last one was kept)
-            - **Article image lightbox** — clicking a thumbnail in the editor strip opens a full-size lightbox overlay
-            - **Blossom image rendering** — images served from content-addressed storage (Blossom/NIP-96) with non-standard extensions (`.jp` etc.) now render inline instead of as plain links
-            - **nostr: entity parsing** — case-insensitive matching for `nostr:` prefix; broader extension support for image URLs
+            - **Image uploads fixed** — updated to current NIP-96 endpoints for nostr.build and files.sovbit.host; removed dead services (void.cat, nostrcheck.me)
+            - **SVG upload blocked** — SVG files are now rejected with a clear error message; they were silently uploading but rendering as broken images on all Nostr clients
+            - **NIP-98 payload hash** — upload auth headers now include the required SHA-256 body hash for strict NIP-96 servers
 
             ### v0.12.5 — UI Polish & Consistency