Skip to content

Release 0.1.14: resolve dependency audit findings - #28

Merged
vrtmrz merged 2 commits into
mainfrom
release/0.1.14
Oct 13, 2026
Merged

vrtmrz merged 2 commits into
mainfrom
release/0.1.14

Conversation

@vrtmrz

@vrtmrz vrtmrz commented Oct 13, 2026 •

Copy link
Copy Markdown
Owner

This maintenance release resolves dependency audit findings while preserving DiffZip's existing features and minimum supported Obsidian version.

Changes

  • Update Obsidian's development package, devalue, and source-map-js to fixed versions.
  • Override Moment under Obsidian to 2.31.0, including the older dependency used by the Obsidian ESLint plug-in.
  • Remove the import-alias plug-in and its configuration because its only rule was already disabled.
  • Prepare version 0.1.14 with a minimum supported Obsidian version of 1.8.7.

Validation

  • Clean installation with npm 10.9.4 and npm audit: zero findings.
  • Production build, lint, and Community lint passed; build and lint warnings remain.
  • UI tests: 17 passed. Deno tests: 68 passed. Release metadata test passed.
  • Real Obsidian E2E passed for backup and restore, legacy folder restore, restore confirmations, and mirror deletion and failure protection.
  • Direct release assets and the ZIP contain the same validated build.

Published release validation

  • Downloaded release assets match the validated checksums.
  • BRAT updates 0.1.13 to 0.1.14, loads the plug-in, and preserves existing settings.
  • A small backup and restore round trip succeeds with the published build.

@vrtmrz
vrtmrz marked this pull request as ready for review October 13, 2026 04:36
@vrtmrz
vrtmrz merged commit b4f82cc into main Oct 13, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant