From 0c1347c07a1889dd56d1f5fe3c22cfe54bdc73d0 Mon Sep 17 00:00:00 2001 From: Axelle Abbadie Date: Fri, 17 Jul 2026 17:58:45 +0200 Subject: [PATCH] chore: release v0.1.9 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Publie les correctifs de compatibilité 1.12.7 et de sécurité (protobufjs) accumulés sur dev. --- CHANGELOG.fr.md | 8 ++++++++ CHANGELOG.md | 8 ++++++++ manifest.json | 2 +- package.json | 2 +- versions.json | 3 ++- 5 files changed, 20 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.fr.md b/CHANGELOG.fr.md index ffd6c84..2a3c74f 100644 --- a/CHANGELOG.fr.md +++ b/CHANGELOG.fr.md @@ -1,5 +1,13 @@ # Changelog +## [prod] v0.1.9 — 17 juillet 2026 + +### Corrections +- `minAppVersion` redescendu à `1.12.7` (depuis `1.13.0`) — Obsidian 1.13 reste réservé à l'accès anticipé Catalyst ; la majorité des utilisateurs sont encore sur la version publique 1.12.7 +- Onglet Paramètres : ajout d'un fallback `display()` en complément de `getSettingDefinitions()`, pour que l'onglet s'affiche toujours sur Obsidian < 1.13, qui ignore l'API déclarative des réglages +- `setDestructive()` (exclusif à 1.13.0) remplacé à nouveau par `setWarning()` sur les boutons supprimer/confirmer de `EditRuleModal` et `ConfirmModal`, pour la même raison de compatibilité +- Sécurité : `protobufjs` forcé en `^7.6.5` via `overrides` npm — la dépendance transitive apportée par `@xenova/transformers` → `onnxruntime-web` → `onnx-proto` était figée sur une version vulnérable à l'exécution de code arbitraire ([GHSA-xq3m-2v4x-88gg](https://github.com/advisories/GHSA-xq3m-2v4x-88gg), CVSS 9.8) + ## [prod] v0.1.8 — 9 juillet 2026 ### Corrections diff --git a/CHANGELOG.md b/CHANGELOG.md index bee9ffe..197115d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,14 @@ > Previous entries in French: [CHANGELOG.fr.md](CHANGELOG.fr.md) +## [prod] v0.1.9 — 17 July 2026 + +### Fixes +- `minAppVersion` lowered back to `1.12.7` (from `1.13.0`) — Obsidian 1.13 is still Catalyst-only (early access); most users are on the public 1.12.7 release +- Settings tab: added a `display()` fallback alongside `getSettingDefinitions()` so the tab still renders on Obsidian < 1.13, which doesn't know about the declarative Settings API +- `setDestructive()` (1.13.0-only) reverted to `setWarning()` on the delete/confirm buttons in `EditRuleModal` and `ConfirmModal`, for the same pre-1.13 compatibility reason +- Security: forced `protobufjs` to `^7.6.5` via npm `overrides` — the transitive dependency pulled in by `@xenova/transformers` → `onnxruntime-web` → `onnx-proto` was pinned to a version vulnerable to arbitrary code execution ([GHSA-xq3m-2v4x-88gg](https://github.com/advisories/GHSA-xq3m-2v4x-88gg), CVSS 9.8) + ## [prod] v0.1.8 — 9 July 2026 ### Fixes diff --git a/manifest.json b/manifest.json index 1dcfa0e..6058447 100644 --- a/manifest.json +++ b/manifest.json @@ -1,7 +1,7 @@ { "id": "pseudonymizer-tool", "name": "Pseudonymizer Tool", - "version": "0.1.8", + "version": "0.1.9", "minAppVersion": "1.12.7", "description": "Pseudonymize and correct interactional transcripts (Jefferson, ICOR, SRT, CHAT/CHA). Designed for qualitative researchers in linguistics and conversation analysis.", "author": "Axelle Abbadie", diff --git a/package.json b/package.json index 1c53ca2..da4568e 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "pseudonymizer-tool", - "version": "0.1.8", + "version": "0.1.9", "description": "Obsidian plugin for pseudonymizing and correcting interactional transcripts (Jefferson, ICOR, SRT, CHAT/CHA).", "author": "Axelle Abbadie", "homepage": "https://cv.hal.science/axelle-abbadie/", diff --git a/versions.json b/versions.json index 6ae5658..f2b9a46 100644 --- a/versions.json +++ b/versions.json @@ -13,5 +13,6 @@ "0.1.5": "1.7.2", "0.1.6": "1.7.2", "0.1.7": "1.13.0", - "0.1.8": "1.12.7" + "0.1.8": "1.12.7", + "0.1.9": "1.12.7" } \ No newline at end of file