v1.1.18

Security

• Sanitized GitHub API fetch errors on /download/ — raw error messages are no longer surfaced to the UI; failures are logged server-side and degrade with a generic upstream API unavailable string, avoiding leakage of upstream API structure or network details.

Accessibility

• Search-hint <kbd> glyphs hidden from the accessible name — the modal hint's arrow/enter symbols now carry aria-hidden="true" paired with sr-only text equivalents ("Up and down arrows", "Enter"), applied to both the static markup and the empty-query repaint; the Close button's Esc kbd is also aria-hidden (covered by aria-keyshortcuts).

Interaction

• Press-state feedback on search results — added a :active scale(0.98) to search results, gated behind prefers-reduced-motion: no-preference.