- Bump version to 3.25.6
- Set minAppVersion to 1.9.0
- Include fix for timeEntries duplication (#968)
- Include webcal:// URL support (#1013)
- Include task recognition fix (#1022)
- Include test improvements
Add privacy policy covering current plugin functionality and optional
network features (ICS subscriptions, webhooks). Will be updated when
calendar integration is added.
- Switch from device flow to loopback redirect flow for Google Calendar
(device flow doesn't support Calendar API scopes)
- Bundle OAuth client credentials (client_id and client_secret) for Quick Setup
- Make client_secret optional in token exchange (only include if present)
- Update esbuild config to inject GOOGLE_OAUTH_CLIENT_SECRET
- Update GitHub Actions workflow to include client_secret in builds
- Keep Microsoft Calendar on device flow (supports calendar scopes)
- Update privacy policy to disclose OAuth integration and Lemon Squeezy
Technical details:
- Google requires client_secret even for public clients (non-standard OAuth)
- PKCE provides actual security, bundled secret just identifies the app
- Follows industry practice (VS Code, GitHub Desktop, etc.)
Add privacy policy covering current plugin functionality and optional
network features (ICS subscriptions, webhooks). Will be updated when
calendar integration is added.
