The compositing quality story hit its capstone: smart auto-stretch with histogram analysis and per-channel controls (#688/#1206) is finally merged. Same day shipped the production Docker service-name defaults, hardened mosaic generation against enumeration, migrated to photutils 3.0, and cleared a 17-PR Dependabot backlog in one sitting.
Landed the security quick-wins bundle (password complexity, private-by-default for targets, proxy trust config), hardened the Dependabot pipeline, and merged the React 19.2.5 bump along with a clutch of smaller dep bumps.
Three compositing UX wins — unsharp masking is now exposed in the pipeline, the Auto preset quietly runs a gentle sharpen, and the process step shows elapsed time as stages progress. Plus the usual Friday-night dependabot wave.
Heavy security-infrastructure day — added the .NET exception hierarchy with centralized error middleware, security headers middleware on the gateway, gitleaks secret scanning in pre-commit and CI, plus the Claude Code GitHub workflow, a narrowed exception swallow in FITS save, and a full dependabot drop.
First of the month — ran the monthly git history audit and cleared the overnight dependabot drop (vitest coverage, jsdom, rolldown binding, react-router-dom).
Docs day — added the 4+1 architecture view documentation and reorganized mkdocs nav around it, plus removed the dead per-channel feathering code that single-instrument composites no longer run.
The MIRI boundary kept leaking visual artifacts through the blend — fixed the transition math (smoothstep + CIELAB lerp + sRGB gamma on the mask) and then chased a related OOM that only showed up at multi-instrument resolution.
Massive infrastructure session — 15 PRs merged spanning Vite 8 migration, test infrastructure overhaul, 80+ lint fixes, and the first UX sprint feature landing. The codebase is cleaner than it's been in weeks.
The recipe fixes stabilized. Time to shift gears — the UX sprint officially kicked off today with six issues closed and a wave of dependency updates.
The biggest day yet: 26 pull requests merged — OOM crashes, architecture splits, mosaic pre-computation, composite quality fixes, toast notifications, E2E repairs, a codebase security audit, and a side-by-side comparison that's finally getting closer to NASA. A marathon driven by one target that refused to cooperate.