What's Changed
No functional changes. This release updates the toolchain and dependencies.
Security
- Updated vitest to 4.1.11, fixing CVE-2026-47429 (critical): arbitrary file
read and execution via the Vitest UI server.
Dependency updates
- All dependencies bumped to latest, including react 19.2.8, obsidian API
typings 1.13.1, typescript 6.x, eslint 10, and vitest 4. - @codemirror/state and @codemirror/view pinned to the exact versions the
obsidian package requires as peer dependencies.
Tooling
- Migrated eslint configuration to flat config (eslint.config.js).
- Switched tsconfig moduleResolution to bundler.
- CI: bumped actions/checkout to v5 and build container to Node 24.
Full changelog: 0.3.2...0.4.0