chore: release nostream-website@1.3.0

Author: github-actions[bot]

.changeset/quiet-previews-deploy.md

@@ -1,5 +1,45 @@
 # nostream-website
 
+## 1.3.0
+
+### Minor Changes
+
+- [#884](https://github.com/cameri/nostream/pull/884) [`e654852`](https://github.com/cameri/nostream/commit/e65485297bf4d9a20ccf8f78a4aae638a22655e1) Thanks [@chappie-daemon](https://github.com/chappie-daemon)! - Add a social preview card generated from source.
+
+  `website/site/scripts/build-social-card.mjs` renders one composition at two sizes:
+  `public/media/social-card.png` (1200×630, the site's `og:image`) and
+  `public/media/github-social-preview.png` (1280×640, the GitHub repository preview).
+  `Base.astro` now emits the full preview set — `og:image:width`, `og:image:height`,
+  `og:image:alt`, `twitter:image`, `twitter:title`, `twitter:description`,
+  `og:site_name`, `og:locale` — and takes an `ogImage` prop that defaults to the card;
+  `hero-poster.webp` stays the film's poster.
+
+  The GitHub preview is uploaded by hand: **Settings → Social preview** in the
+  repository, which no workflow can set.
+
+### Patch Changes
+
+- [#888](https://github.com/cameri/nostream/pull/888) [`07dc215`](https://github.com/cameri/nostream/commit/07dc2153d1d18e1641c8f0a079c542ab8187bcdc) Thanks [@chappie-daemon](https://github.com/chappie-daemon)! - A pull request's site preview now deploys even when the comment cannot be
+  written, and the CDN cache is purged after a deploy so a fresh preview is not
+  served the previous build.
+
+  **A comment can no longer prevent a deploy.** The preview workflow's comment
+  steps ran before the deploy, so a pull request opened from a fork — whose
+  `GITHUB_TOKEN` is read-only whatever the `permissions:` block grants — failed at
+  `GraphQL: Resource not accessible by integration (addComment)` and skipped the
+  deploy entirely ([run 39134047965](https://github.com/cameri/nostream/actions/runs/39134047965)).
+  The deploy now runs first, every comment step is `continue-on-error`, and the
+  job grants `issues: write` (PR conversation comments are issue comments;
+  `pull-requests: write` alone does not cover them).
+
+  **The cache is purged after deploying**, scoped to `https://ema.tnsor.network/preview/<n>/`
+  via the `prefixes` purge, so a stale window cannot be served — on 2026-10-18
+  `/preview/885/` returned production HTML for about three minutes after the
+  build landed. The production workflow purges the whole zone after its router
+  deploy. Both purges skip with a notice when `CLOUDFLARE_ZONE_ID` is not set for
+  their environment, so an unconfigured environment deploys normally instead of
+  failing.
+
 ## 1.2.5
 
 ### Patch Changes

.changeset/social-preview-card.md

@@ -1,6 +1,6 @@
 {
   "name": "nostream-website",
-  "version": "1.2.5",
+  "version": "1.3.0",
   "private": true,
   "type": "module",
   "description": "ema.tnsor.network landing page and docs, built with Astro",