MySecret - v1.0.1

Release v1.0.1 — Obsidian Guidelines Compliance & Security Hardening

This release incorporates official Obsidian Developer Guidelines compliance updates, UI standardizations, and comprehensive security hardening.

🛡️ Obsidian Community Guidelines Compliance

• Manifest Updates: Raised minimum supported Obsidian version to 1.5.0 (minAppVersion: 1.5.0) and updated description.
• Native UI Components:
  • Standardized all section titles to use native Setting.setHeading().
  • Adopted Obsidian's official .setDestructive() method for irreversible operations (full vault decrypt, data wipe).
  • Replaced raw SVG markup with native setIcon() calls (eye, fingerprint).
  • Encapsulated UI notices and bridge warnings into dedicated CSS classes (styles.css).
• Detached Window Resilience: Wrapped background auto-lock timers with window.setTimeout() and window.setInterval().

🔒 Security Hardening & Supply Chain

• Supply Chain Remediation: Upgraded build bundler esbuild to ^0.25.0 (0.25.12), resolving advisory GHSA-67mh-4wv8-2f99 / CWE-346.
• i18n Interpolation Protection: Patched template string interpolation in src/i18n/index.ts to neutralize regex metacharacter expansion and prevent replacement token leaks ($&, $1).
• Continuous Automated CI/CD: Added Google OSV-Scanner (osv-scanner.yml) and GitHub CodeQL SAST (codeql.yml) workflows.
• Automated Test Suite: Verified 83 automated cryptographic, regression, and unit tests passing with a 100% success rate.