This completes the diagnostics privacy hotfix started in v0.2.4.
A live Home Assistant validation found that the config entry unique_id still contained the BLE address even after the LAN keys and top-level runtime address were fixed. v0.2.5 now redacts that field as well.
Fixed across v0.2.4 and v0.2.5:
- Tuya LAN local key
- Tuya LAN host and device ID
- top-level runtime BLE address
- config-entry unique ID derived from the BLE address
Users should update to v0.2.5 before downloading or sharing diagnostics. The repository’s existing public diagnostic attachments were audited and no exposed LAN credential or device identifier was found.
Thanks again to @elitistphoenix for triggering the deeper audit.
Contributors
elitistphoenix