NoteCloud Sync 0.4.7

NoteCloud Sync 0.4.7

• Upgrade DOMPurify to 3.4.17, outside the reported advisory range. Also resolve the development checker's nested Moment advisory without downgrading its checks.
• Add English installation, basic usage, privacy, payment and original-author/contributor information; keep the Chinese guide.
• Remove CSS !important while retaining correct renewal-control hiding and showing.
• Reuse one vault-file snapshot per sync. Selected-folder, safe-path, supported-type and size safeguards remain; required vault enumeration is disclosed, not hidden.
• Build and test the three release files on GitHub Actions and generate cryptographically verifiable artifact provenance. Older releases are not overwritten or retroactively presented as CI builds.

Local verification: strict TypeScript; lint 0 errors / 1 retained older-API compatibility warning; seven regression suites, including 1058 compatibility/cache assertions, 107 real-DOM announcement checks and new CSS/scope tests. A real isolated API fixture passed 8 groups / 23 plugin requests. npm audit reported 0 known vulnerabilities at release preparation. These checks do not replace all-platform real-device testing.

Build workflow: https://github.com/Yinds0270/NoteCloud/actions/runs/39373446547

To verify a downloaded asset, run e.g. gh attestation verify main.js --repo Yinds0270/NoteCloud (also verify manifest.json and styles.css). Provenance proves where/how that asset was built, not that software is bug-free.

中文说明

修复自动审核指出的依赖版本、英文说明和CSS问题，并补构建来源证明。保留必要的仓库文件枚举，减少一次重复遍历，不上传用户所选范围外的文件。原作者及贡献者 lby7469、新仓库维护者 Yinds0270 的署名保留；署名不授予仓库管理权限。

原下载地址 lby7469/obsidianplug、插件ID notecloud-sync 和旧版本继续保留。旧用户无需改仓库；升级只替换 main.js、manifest.json、styles.css，不要覆盖或公开自己的 data.json。目录最新审核状态以实际页面为准，不因本次发布宣称所有检查通过。

云功能需要账号和网络；免费容量有限，额外扩容可能收费。当前不是端到端加密，拥有服务器权限的运维人员仍可能读取在线内容。首次使用请先备份并在测试仓库验证。