MySecret - v1.0.7

Fix(i18n):

Translate setup wizard instead of hardcoding Spanish
The setup wizard (master password, recovery phrase, biometrics steps)
hardcoded its text in Spanish, so it ignored the selected/detected
language (e.g. English on Android). Move those strings into the i18n
dictionaries (en/es/ru/zh) and use t(). Spanish output is unchanged.

Also add a one-time post-update notice for existing vaults and bump the
version to 1.0.7.

Credit: Gideon-Felt found and proposed the fix for this specific bug
(the setup wizard ignoring the selected language). The rest of this
project, and the other changes in this commit, are the maintainer's own.

MySecret - v1.0.6

🔧 Security and bug patches

MySecret - v1.0.5

🔧 Fix - decouple encryption hooks from DataAdapter and route through Vault to fix Obsidian Sync and Publish integration

Full Changelog: 1.0.4...1.0.5

MySecret - v1.0.4

Release v1.0.4 — 🔧 Obsidian Fix

Full Changelog: 1.0.2...1.0.4

MySecret - v1.0.3

Release v1.0.3 — 🔧 Aesthetic arrangements

MySecret - v1.0.2

Release v1.0.2 — Linter Compliance & API Compatibility

This release resolves strict linter guidelines and ensures backward compatibility with Obsidian v1.5.0+.

🔧 Fixes & Compliance

• API Compatibility: Restored setWarning() on destructive action buttons to ensure full compatibility with minAppVersion: 1.5.0.
• Linter Directives: Added formal technical descriptions to all eslint-disable directive comments across the codebase.
• Node.js Modernization: Replaced external builtin-modules package with native node:module in the build configuration.
• Test Suite: Verified all 83 automated cryptographic and regression tests passing.

MySecret - v1.0.1

Release v1.0.1 — Obsidian Guidelines Compliance & Security Hardening

This release incorporates official Obsidian Developer Guidelines compliance updates, UI standardizations, and comprehensive security hardening.

🛡️ Obsidian Community Guidelines Compliance

• Manifest Updates: Raised minimum supported Obsidian version to 1.5.0 (minAppVersion: 1.5.0) and updated description.
• Native UI Components:
  • Standardized all section titles to use native Setting.setHeading().
  • Adopted Obsidian's official .setDestructive() method for irreversible operations (full vault decrypt, data wipe).
  • Replaced raw SVG markup with native setIcon() calls (eye, fingerprint).
  • Encapsulated UI notices and bridge warnings into dedicated CSS classes (styles.css).
• Detached Window Resilience: Wrapped background auto-lock timers with window.setTimeout() and window.setInterval().

🔒 Security Hardening & Supply Chain

• Supply Chain Remediation: Upgraded build bundler esbuild to ^0.25.0 (0.25.12), resolving advisory GHSA-67mh-4wv8-2f99 / CWE-346.
• i18n Interpolation Protection: Patched template string interpolation in src/i18n/index.ts to neutralize regex metacharacter expansion and prevent replacement token leaks ($&, $1).
• Continuous Automated CI/CD: Added Google OSV-Scanner (osv-scanner.yml) and GitHub CodeQL SAST (codeql.yml) workflows.
• Automated Test Suite: Verified 83 automated cryptographic, regression, and unit tests passing with a 100% success rate.

MySecret - v1.0 (Obsidian)

What's New in v1.0.0

Initial official release of MySecret for Obsidian:

• 🔐 Standard Cryptography: Transparent file & folder encryption with AES-256-GCM and Argon2id key derivation (64 MB, 3 passes).
• 🛡️ Zero Vendor Lock-in: Full independence from Obsidian. Standalone recovery with Python (standalone-decryptor.py) and browser Web Crypto (offline-decryptor.html).
• 👆 Biometrics: Fast unlock support for Windows Hello (DPAPI) and Android Fingerprint/Face via companion WebAuthn bridge.
• 🏷️ BIP-39: 24-word paper recovery mnemonic.
• 🌐 Bilingual: Complete interface and documentation in English and Spanish.