Skip to content

v0.2.4 - Diagnostics credential redaction hotfix

Choose a tag to compare

@zampix1 zampix1 released this 15 Jul 13:03

This is a privacy/security hotfix for Home Assistant diagnostics.

Fixed

  • Redacts the actual Tuya LAN storage keys: lan_host, lan_device_id and lan_local_key.
  • Stops exporting the runtime BLE address as an unredacted top-level string.
  • Adds regression tests tied to the integration’s real LAN config-key constants.

Users running v0.2.3 or earlier should update before downloading or sharing new diagnostics.

If you previously posted a diagnostics file containing Tuya LAN configuration, remove the attachment and rotate or re-provision the device local key where practical. The project’s existing public issue/discussion attachments were audited during this fix; no exposed LAN local keys or unredacted identifiers were found in those files.

Thanks to @elitistphoenix for the precise report.