Omgato 0.1.5

Omgato 0.1.5 is a security-hardening release for the Key Light integration.

Security

• Caps raw mDNS discovery output at 256 KiB, ARP output at 64 KiB, ARP entries at 256, and discovered or cached lights at 32.
• Validates and bounds retained host, name, IP, port, and MAC fields before storing device state.
• Caps Key Light HTTP JSON responses at 16 KiB and rejects responses with an unexpected number of light states.
• Replaces one OS thread per discovered light with a fixed worker pool of at most four threads while preserving result order.

Validation

• Adds regression coverage for oversized discovery and HTTP responses, excessive devices, invalid fields, bounded cache state, and worker concurrency.
• Passes the complete workspace test suite, Clippy with warnings denied, QML linting, and omarchy plugin validate.

Thanks to the Omarchy plugin marketplace maintainers for the detailed follow-up security review.