Development History

Patch Notes

Updates, fixes, improvements, security changes, and new features shipping to THE BRIDGE4K.

v0.1 Alpha

v0.1.1

Latest

August 20, 2026

Improved YouTube live-status checking to reduce unnecessary API usage.
Changed offline YouTube account checks to a 2-minute interval.
Added protection against YouTube quota exhaustion so the Bridge stops repeatedly hammering the API after a quota error.
Improved handling of YouTube parser and API failures so temporary failures do not repeatedly generate large error traces.
Added better YouTube live-chat cleanup and retry behavior.
Improved account-specific YouTube OAuth error handling.
Fixed stale dashboard login behavior caused by old browser storage.
Improved account-link security between authenticated Bridge sessions and platform connections.
Added the Patch Notes page.
Added a new Bubble Opacity setting to the overlay dashboard.
Creators can now adjust bubble opacity from 10% to 100%.
Added Bubble Opacity to saved overlay settings.
Added Bubble Opacity to the generated OBS overlay URL.
Existing overlays default to 100% opacity.
Improved the dashboard overlay appearance controls.

Security Update

August 18, 2026

Added better OAuth security for Twitch and YouTube with signed states and 10-minute expiration.
Added OAuth rate limiting for Twitch, YouTube, and Kick.
Added PKCE to Kick login.
Added Kick webhook signature verification so fake webhooks get blocked.
Added Kick webhook replay protection.
Tightened CORS so only approved Bridge4K domains can access the API.
Added security headers and HSTS.
Made sure .env and .git files are not publicly accessible.
Removed the /debug-overlay endpoint.
Locked down overlay settings so you have to be logged in.
Added account ownership checks so users cannot access someone else's overlay settings.
Tested unauthorized access and confirmed it returns 401.
Tested cross-account access and confirmed it returns 403.
Reduced what the public account and platform status endpoints expose.
Made sure WebSocket messages stay separated by the correct overlay.
Tested the security headers in production.
Verified Kick webhook signing is working in production.
Completed the major security hardening pass for THE BRIDGE4K backend.

Update

August 15, 2026

Added an option to show or hide ! commands from appearing on the Bridge overlay. This is now a per-overlay setting that can be turned on or off.
Added the ability for creators to choose which bots they want hidden instead of automatically hiding every bot. Leaving the list empty allows all bots to show.
Fixed timed-out Twitch users so their messages are removed from the Bridge overlay and don't continue showing after they get timed out.
Added a copied confirmation when using the Copy button for the OBS URL.

Initial Release

August 12, 2026