0.1.11

sec(desktop): harden renderer + packaging

Remediate the findings from the 2026-06-29 security review (docs/):

- I1: esc() now encodes " and ' too, making it safe in attribute contexts
  (values land inside title="…") not just element content.
- I2: add a strict CSP <meta> to renderer/index.html — connect-src 'self'
  contains exfiltration (all egress is via IPC), img-src pinned to evetech.
- I3: wire Electron fuses via electron-builder's electronFuses (runAsNode
  off, NODE_OPTIONS/inspect off, onlyLoadAppFromAsar on; asar integrity
  validation left off pending a smoke-tested Windows build).
- I4: data:wipe-all now shows a main-process confirmation dialog before
  wiping, so a compromised renderer can't silently destroy user data.

Also set sandbox/contextIsolation/nodeIntegration explicitly in
webPreferences so a future Electron default change can't weaken the
renderer. Documented in CLAUDE.md + README "Privacy & security".

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

0.1.10

v0.1.10

feat(clipboard): Wayland wl-paste read + local-scan summary panel; sy…

0.1.9

Merge pull request #1 from dedo1911/ci/dependabot-eve-fit-engine

ci: auto-update eve-fit-engine via Dependabot + automerge

0.1.8

docs: add SECURITY.md security policy

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

0.1.7

fix(copy): drop stale local-AI line from the About disclaimer markup

Intel has no LLM, so the leftover "answers are generated by a local AI" sentence (copied from Capsuleers.IA) was false. Align the aboutDisc3 markup default with the already-corrected i18n value (data + sources, D-Scan offline, Local via eve-kill).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

0.1.6

v0.1.6

feat(desktop): full data wipe on uninstall, version in About, EPIPE h…

0.1.5

copy: drop "always verify in-game" from the about panel

That disclaimer fit the AI app (answers may be wrong). Intel only surfaces
factual killboard/SDE data, so it's removed from both locales.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

0.1.4

v0.1.4

style: full cyan (#22d3ee) rebrand to distinguish Intel from Capsulee…

0.1.3

ci: auto-publish a GitHub Release on every push/merge to main

Previously main pushes only built artifacts and a release was cut on a vX.Y.Z
tag. Now every push to main builds + publishes a Release that electron-updater
consumes. The release version is computed at build time as
<major>.<minor>.<github run number> from desktop/package.json (not committed
back, so no workflow loop), giving distinct, monotonically-increasing versions
for auto-update. Bump major/minor in package.json to start a new line.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>