Skip to content

pinax 0.1.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Jul 05:51
0.1.2
This tag was signed with the committer’s verified signature.
nicknikolakakis Nick Nikolakakis
GPG key ID: 8F0F113A42B9A00E
Verified
Learn about vigilant mode.
3b172b1
This commit was signed with the committer’s verified signature.
nicknikolakakis Nick Nikolakakis
GPG key ID: 8F0F113A42B9A00E
Verified
Learn about vigilant mode.

Removes in-vault code execution to comply with the Obsidian community review; custom widgets now come from companion plugins.

Removed

  • The widgets.js runtime loader and the "Custom widget code" trust gate. Released versions never execute code from the vault. The loader is preserved on the feature/widgets-js branch.

Changed

  • Custom widgets are registered by companion plugins via window.pinax.registerWidget(...); a copy-paste template (manifest.json + main.js) ships in examples/companion-widget-plugin/ and AUTHORING.md, written so an LLM can generate a working widget plugin from it.
  • Profile bundles still carry widgets.js as inert data for sharing; settings texts, SECURITY.md and README updated accordingly (three trust gates now).

Commits

  • 3b172b1 0.1.2: remove in-vault code execution, document companion-plugin widgets

Full Changelog: 0.1.1...0.1.2

Verify this build

gh attestation verify main.js --repo sphragis-oss/pinax
Assets 6
Loading