What's new
- Adds per-send, opt-in support for HTTPS JPEG, opaque PNG, and static GIF images referenced by Markdown image tokens.
- Uses an SSRF-hardened transport with public-IP validation, DNS pinning, isolated TLS sockets, same-origin redirects, strict deadlines, and bounded downloads.
- Reuses the existing EPUB image validation, hashing, deduplication, and privacy preflight pipeline.
- Cancels active remote downloads and presigned document uploads when the send is cancelled or the plugin unloads.
- Keeps remote transparent PNG/WebP conversion disabled because browser decoding cannot be cancelled safely; SVG remains planned for 0.1.7.
Verification
- 241 automated tests
- Typecheck, ESLint, production build, and dynamic-code bundle policy
- Live public HTTPS image fetch and Obsidian 0.1.6 load validation
- GitHub artifact provenance attestation
Full Changelog: 0.1.5...0.1.6