This patch release tightens the Obsidian release bundle and addresses the remaining automated review findings that were visible after 0.4.4. The most important change is that the plugin no longer bundles the broad OpenAI Agents provider package, which was pulling in an unused WebSocket keepalive interval and triggering the scanner warning about periodic network activity.
Changes since 0.4.4:
- Added full AGPL-3.0-only license text and kept package metadata aligned.
- Added GitHub artifact attestations for release assets.
- Removed release packaging of unsupported extra files; releases now attach only main.js, manifest.json, and styles.css.
- Updated Obsidian-facing source warnings around timers, promises, Markdown rendering lifecycle, settings headings, require-style imports, and ANSI escape handling.
- Changed selection tracking from interval polling to event-based updates.
- Narrowed OpenAI SDK imports to the realtime packages actually used by voice mode, removing the unused bundled Responses WebSocket keepalive code.
- Bumped package.json and manifest.json to 0.4.6.