Skip to content

v0.15.4

Choose a tag to compare

View all tags
@bvis bvis released this 15 Apr 22:10
v0.15.4
This tag was signed with the committer’s verified signature.
bvis Basi
GPG key ID: D105F5B79B5AAB4A
Verified
Learn about vigilant mode.
33a75cf
This commit was signed with the committer’s verified signature.
bvis Basi
GPG key ID: D105F5B79B5AAB4A
Verified
Learn about vigilant mode.

Security hardening, reliability & code quality

Security

  • FCM credentials stored via HA Store API (.storage/) instead of plaintext files
  • Password field masked in config flow UI
  • Recursive log redaction for sensitive tokens at all nesting levels
  • Temp file writes use atomic fd operations (no TOCTOU race)
  • CI workflow restricted to contents: read permissions

Reliability

  • Public get_access_token() with auto-reauthentication replaces direct private attribute access
  • Config migration v1→v2 auto-promotes entries with all required fields
  • 10-second grace period after FCM listener startup prevents phantom doorbell rings on reload
  • Recording cleanup uses portable hass.config.media_dirs and runs off the event loop

Scripts

  • extract_credentials.py: fixes PRO environment detection, local Byte variable resolution, Android strings.xml parsing, base_url derivation from auth_url

Full changelog: https://github.com/bvis/fermax-blue-hass/blob/main/CHANGELOG.md

Assets 2
Loading