v0.4.4

What's changed

Security

• Update artifacts are now verified with a minisign signature before apply — tampered or unsigned binaries are rejected (#31, #32)

Features

• Native host reports a capabilities array in its STATUS message so the extension can feature-gate without version comparisons (#27)

Performance

• Artwork resolution: LRU cache, in-flight deduplication, and parallel Cover Art Archive probes — fewer redundant API calls per track (#35)
• SMTC (Windows desktop media): configurable poll timeout (#35)

Bug fixes

• Fixed stale presence updates when the same track was set repeatedly; Discord API calls now skipped when activity is unchanged (#26)
• Fixed URL matching using proper URL parsing instead of string.includes() (CodeQL finding) (#28)
• Windows: migrated smtc.rs to windows-rs 0.62 API (#33, #34, #37)
• Windows: fixed spin_wait and IAsyncOperation imports for windows-rs 0.62 / windows-future 0.3 (#37)

Internal

• Shared PlaybackAnchor utility replaces duplicated wall-clock state in Tidal and YouTube Music activities (#36)
• Extracted shared helpers across background, popup, and Presence to reduce duplication (#36, #30)
• Added Windows cargo check CI job to catch cfg-gated compilation errors on Linux runners (#37)
• Consolidated updater documentation into docs/UPDATER.md (#29)