Commit graph

16 commits

Author SHA1 Message Date
copilot-swe-agent[bot]
fd84376a1f
Fix security vulnerabilities in mcp-ts and vscode-ext lockfiles
- mcp-ts: Update vite 8.0.9→8.1.4 (fixes server.fs.deny bypass CVE)
- mcp-ts: Update hono 4.12.14→4.12.30 (fixes CORS origin reflection CVE)
- vscode-ext: Update vite 8.0.10→8.1.4 (fixes server.fs.deny bypass CVE)
- vscode-ext: Update esbuild 0.28.0→0.28.1 (fixes withdrawn RCE advisory)
- Add overrides in mcp-ts/package.json to enforce hono>=4.12.25, vite>=8.0.16
- Add overrides in vscode-ext/package.json to enforce vite>=8.0.16
- Regenerate both standalone lockfiles with secure package versions
2026-07-16 04:34:22 +00:00
copilot-swe-agent[bot]
b7f9fc7487
Initial plan for security vulnerability fixes 2026-07-16 04:31:22 +00:00
dependabot[bot]
fc2badc551
build(deps): bump the npm_and_yarn group across 1 directory with 2 updates
Bumps the npm_and_yarn group with 2 updates in the / directory: [hono](https://github.com/honojs/hono) and [js-yaml](https://github.com/nodeca/js-yaml).


Updates `hono` from 4.12.23 to 4.12.30
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](https://github.com/honojs/hono/compare/v4.12.23...v4.12.30)

Updates `js-yaml` from 4.1.1 to 4.3.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0)

---
updated-dependencies:
- dependency-name: hono
  dependency-version: 4.12.30
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 4.3.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-15 01:15:00 +00:00
dependabot[bot]
aaac7c7baf
build(deps): bump the npm_and_yarn group across 2 directories with 2 updates
Bumps the npm_and_yarn group with 2 updates in the / directory: [esbuild](https://github.com/evanw/esbuild) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).
Bumps the npm_and_yarn group with 1 update in the /bindery-core directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `esbuild` from 0.28.0 to 0.28.1
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.0...v0.28.1)

Updates `vite` from 8.0.10 to 8.0.16
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite)

Updates `vite` from 8.0.10 to 8.0.16
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 8.0.16
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 8.0.16
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-16 07:18:46 +00:00
dependabot[bot]
dd8af25cf4
build(deps): bump hono in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [hono](https://github.com/honojs/hono).


Updates `hono` from 4.12.18 to 4.12.23
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](https://github.com/honojs/hono/compare/v4.12.18...v4.12.23)

---
updated-dependencies:
- dependency-name: hono
  dependency-version: 4.12.23
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-04 21:00:34 +00:00
Erik van der Boom
42d0f2b1b2 fix: update brace-expansion to version 5.0.6 and add overrides for qs 2026-05-29 15:55:31 +02:00
dependabot[bot]
89cef54ac1
build(deps): bump qs in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [qs](https://github.com/ljharb/qs).


Updates `qs` from 6.15.1 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.15.1...v6.15.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-23 14:49:07 +00:00
Erik van der Boom
a7049e1900 refactor: update descriptions for bindery_git_snapshot command in README and package.json 2026-05-12 23:43:22 +02:00
Erik van der Boom
87906e8e42 feat: update package.json to set module type and add eslint-plugin-obsidianmd as devDependency
fix: refactor lineBoundaryWrap function and improve startReviewMarkerCommand logic in extension.ts

refactor: simplify invoke functions in mcp.ts by removing async where unnecessary
2026-05-06 12:08:58 +02:00
copilot-swe-agent[bot]
6245f167a3
Address review feedback: fix ESLint config, remove dead code, add TFile guard test
Agent-Logs-Url: https://github.com/evdboom/Bindery/sessions/1fce634d-cca8-46c3-ba46-914a81b2924d

Co-authored-by: evdboom <18037882+evdboom@users.noreply.github.com>
2026-05-05 15:38:12 +00:00
Erik van der Boom
2a691d248a Refactor mcp.ts and extension.ts to improve code clarity and performance
- Added descriptive comments to the require statements for loading mcp-ts tools.
- Changed the return type of writeMcpJson to void, removing unnecessary async/await.
- Updated the call to writeMcpJson in registerMcpCommand to reflect the new return type.
2026-05-05 17:19:29 +02:00
Erik van der Boom
e4773fdf28 feat: integrate @bindery/merge for book merging and tool location
- Added bindery-merge as a workspace in package.json.
- Updated vscode-ext to include @bindery/merge as a dependency.
- Refactored merge.ts to re-export merging functionalities from @bindery/merge, removing legacy code.
- Simplified tool-locate.ts by re-exporting tool location logic from @bindery/merge, enhancing code reuse and maintainability.

Co-authored-by: Copilot <copilot@github.com>
2026-05-03 23:50:11 +02:00
Erik van der Boom
d400fd8a2f ci: fix release workflow - build core first, add obsidian plugin zip artifact 2026-04-28 16:10:57 +02:00
Erik van der Boom
426be6c233 chore: add dependencies for obsidian-plugin 2026-04-28 10:36:25 +02:00
copilot-swe-agent[bot]
a747d5be6f
feat: add obsidian-plugin package with formatter, exporter, settings tab, and init workspace
Agent-Logs-Url: https://github.com/evdboom/Bindery/sessions/09d0d68f-9f9f-41c5-a6bf-5dc0fc2ac79b

Co-authored-by: evdboom <18037882+evdboom@users.noreply.github.com>
2026-04-27 23:16:33 +00:00
copilot-swe-agent[bot]
c0495dc917
feat: extract bindery-core, refactor vscode-ext/mcp-ts to use @bindery/core
Agent-Logs-Url: https://github.com/evdboom/Bindery/sessions/09d0d68f-9f9f-41c5-a6bf-5dc0fc2ac79b

Co-authored-by: evdboom <18037882+evdboom@users.noreply.github.com>
2026-04-27 23:09:03 +00:00