v2.1.3

Changes

• fix: int32 range check in DataStreamParser
• fix: readFloat64LE missing reader index advance
• fix: utf-8 tag using char count not byte length
• fix: validate encrypted data length before crypto split
• fix: validate required TLV fields in pairing handlers
• fix: unhandled Promise.all rejection in RTP proxy setup
• fix: missing SEQUENCE_NUM check in pair handlers
• fix: prevent M1 resetting in-progress pair setup
• fix: TLV decoder missing length bounds validation
• fix: unsafe non-null assertions in accessory lookups
• fix: validate aid.iid format before parsing
• fix: unguarded buffer reads in camera stream TLV parsing
• fix: category defaulting to string instead of enum
• fix: missing error argument in pairing debug logs
• fix: use constant-time comparison for pincode checks
• fix: "undefined" string in characteristic error warnings
• fix: O(n²) buffer concat in encrypt/decrypt hot path
• chore: dependency updates, inc. typescript
• docs: regenerate typedoc docs

Homebridge Dependencies

• @homebridge/ciao @ v1.3.7
• @homebridge/dbus-native @ v0.7.4
• bonjour-hap @ v3.10.1