Skip to content

Bridge Control 0.5.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Jul 18:44
0.5.4
64bee64
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

English

Bridge Control 0.5.4 hardens the public plugin after the Obsidian automated review:

  • removes child_process and every executable launch from the companion;
  • uses the vault's authoritative Vault.configDir with fail-closed schema-v5 migration and case-insensitive denial;
  • fixes the reported TypeScript, regular-expression, timer, thrown-value, and CSS findings;
  • adds repeatable locked builds and GitHub SLSA attestations for main.js, manifest.json, and styles.css.

Node filesystem access remains intentionally bounded to documented bridge-coordination stores; note reads and mutations continue to use public Obsidian APIs. Install the matching Obsidian Bridge 0.5.4 component.

Full bilingual release notes · Changes since 0.5.3

Italiano

Bridge Control 0.5.4 rafforza il plugin pubblico dopo la revisione automatica Obsidian:

  • elimina child_process e ogni avvio di eseguibili dal companion;
  • usa il vero Vault.configDir con migrazione prudente allo schema v5 e divieto case-insensitive;
  • corregge le segnalazioni TypeScript, espressioni regolari, timer, valori lanciati e CSS;
  • aggiunge build ripetibili da lockfile e attestazioni GitHub SLSA per main.js, manifest.json e styles.css.

L'accesso filesystem Node resta intenzionalmente limitato agli archivi documentati di coordinamento del bridge; lettura e modifica delle note continuano a usare le API pubbliche di Obsidian. Installa il componente Obsidian Bridge 0.5.4 corrispondente.

Assets 5
Loading