@viguza/homebridge-ezviz 1.8.3 → 1.8.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -0
- package/package.json +2 -2
- package/.claude/settings.local.json +0 -16
package/CHANGELOG.md
CHANGED
|
@@ -19,6 +19,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
19
19
|
### Removed
|
|
20
20
|
- Nothing yet
|
|
21
21
|
|
|
22
|
+
## [1.8.5] - 2026-09-16
|
|
23
|
+
|
|
24
|
+
### Fixed
|
|
25
|
+
- Resolved 18 npm audit vulnerabilities in the dependency tree (2 critical, 9 high, 3 moderate, 4 low), including unsafe boundary generation in `form-data` and arbitrary file write/symlink traversal in `tar`; transitive resolutions now within existing `package.json` semver ranges (`axios` resolves to 1.20.0)
|
|
26
|
+
- Published package tarball no longer bundles local `.claude/settings.local.json`
|
|
27
|
+
- CodeQL: `GITHUB_TOKEN` in the build workflow is now scoped to `contents: read`, since the job never writes anything
|
|
28
|
+
|
|
29
|
+
### Changed
|
|
30
|
+
- `typescript-eslint` bumped to `^8.70.0` to support the newer `eslint` pulled in by the audit fix
|
|
31
|
+
|
|
22
32
|
## [1.8.3] - 2026-09-15
|
|
23
33
|
|
|
24
34
|
### Fixed
|
package/package.json
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
"name": "@viguza/homebridge-ezviz",
|
|
3
3
|
"displayName": "EZVIZ Homebridge Plugin",
|
|
4
4
|
"type": "module",
|
|
5
|
-
"version": "1.8.
|
|
5
|
+
"version": "1.8.5",
|
|
6
6
|
"private": false,
|
|
7
7
|
"description": "A short description about what your plugin does.",
|
|
8
8
|
"author": "Victor Guzman",
|
|
@@ -53,7 +53,7 @@
|
|
|
53
53
|
"ts-jest": "^29.2.5",
|
|
54
54
|
"ts-node": "^10.9.2",
|
|
55
55
|
"typescript": "^5.6.3",
|
|
56
|
-
"typescript-eslint": "^8.
|
|
56
|
+
"typescript-eslint": "^8.70.0"
|
|
57
57
|
},
|
|
58
58
|
"dependencies": {
|
|
59
59
|
"axios": "^1.7.9",
|
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"permissions": {
|
|
3
|
-
"allow": [
|
|
4
|
-
"Bash(gh issue *)",
|
|
5
|
-
"WebSearch",
|
|
6
|
-
"WebFetch(domain:raw.githubusercontent.com)",
|
|
7
|
-
"WebFetch(domain:github.com)",
|
|
8
|
-
"Bash(gh api *)",
|
|
9
|
-
"Bash(npm test *)",
|
|
10
|
-
"Bash(npm run *)",
|
|
11
|
-
"Bash(grep -v \"^$\")",
|
|
12
|
-
"Bash(npm list *)",
|
|
13
|
-
"WebFetch(domain:api.github.com)"
|
|
14
|
-
]
|
|
15
|
-
}
|
|
16
|
-
}
|