Skip to content

PleatView v1.0.4

Choose a tag to compare

@github-actions github-actions released this 01 Nov 12:12
· 59 commits to main since this release
be5681b

What's new

Security fixes from a review of the app, the integration and the release pipeline. Update both the app and the integration.

  • When a TV gets a new address on your network, Home Assistant now follows it only after the TV proves it's the one it paired with. Before, another device on the network could take a TV's place and receive its tokens. A TV still on app 1.0.3 or older stays where it is until its app is updated, or until you add it again with its new address.
  • The TV keeps its Home Assistant token only for the Home Assistant it was made for.
  • pleatview://dashboard links open Home Assistant pages and your dashboards only.
  • Nothing from the app is copied when you move to a new TV, including the web pages' sign-ins.
  • Updated libraries and build tools: none has a known vulnerability.
  • SECURITY.md now explains how PleatView protects your home, and what it can't do.

What's Changed

  • Roadmap: M1 manual checks and the Home Assistant matrix on 1 Nov by @FleRoYs in #53
  • Security fixes from the 2 November audit by @FleRoYs in #54
  • Release 1.0.4 by @FleRoYs in #55

Full Changelog: v1.0.3...v1.0.4