sososo v0.9.1

Added

• "OpenAI Compatible" AI provider for any custom endpoint. A new provider
  option that accepts an arbitrary base URL + your own API key, so any
  third-party gateway speaking the OpenAI Chat Completions wire format —
  OpenRouter, Qwen, and similar — can drive the AI session summary, live
  translation, and transcript chat. Unlike the fixed cloud presets it takes a
  configurable Base URL (defaults to OpenRouter at
  https://openrouter.ai/api/v1); unlike the local-Llama option it requires a
  real API key, stored in the OS keychain. Pick it in Settings → API Keys,
  where a Base URL field appears alongside the key and model, with common
  OpenRouter model suggestions. (Resolves [#10]; thanks @dinoudon.)

Security

• Bumped quinn-proto to 0.11.15 to resolve RUSTSEC-2026-0185 (high,
  CVSS 7.5 — remote memory exhaustion from unbounded out-of-order QUIC stream
  reassembly) in a transitive dependency. Lockfile-only change; no application
  code is affected.

Internal

• CI security audit hardened. bun audit now ignores the low-severity,
  dev-server-only esbuild advisory GHSA-g7r4-m6w7-qqqr (pulled in
  transitively by vite, whose ^0.27.0 esbuild constraint cannot reach the
  patched >=0.28.1, and the shipped Tauri app never runs the vite dev server);
  cargo audit passes on the patched quinn-proto. Both gates still fail on any
  other advisory.

Download

• Windows: sososo_windows_x64-setup.exe
• macOS: sososo_macos_universal.dmg
• Linux: sososo_linux_amd64.AppImage (or .deb / .rpm)

The other assets (latest.json, .app.tar.gz) are used by the in-app auto-updater — you can ignore them. Builds are not code-signed yet, so the OS may warn on first run (Windows SmartScreen / macOS Gatekeeper — on macOS, right-click the app and choose Open).

What's Changed

• feat(ai): add generic OpenAI Compatible provider for custom endpoints by @dinoudon in #12

New Contributors

• @dinoudon made their first contribution in #12

Full Changelog: v0.9.0...v0.9.1