homebridge-roborock-matter 2.3.1 → 2.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +8 -0
- package/package.json +2 -11
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,13 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 2.3.2
|
|
4
|
+
|
|
5
|
+
Security and dependency hygiene release (prompted by the Socket.dev scan of 2.3.1).
|
|
6
|
+
|
|
7
|
+
- **All 10 known vulnerabilities in the production dependency tree resolved** (5 high, 5 moderate — including ws memory disclosure/DoS via mqtt and the qs DoS via express) through lockfile upgrades.
|
|
8
|
+
- **Nine unused dependencies removed entirely:** abstract-things, tinkerhub-discovery, yargs, chalk, deep-equal, rxjs, semver, debug, and express — all inherited from the upstream project's pre-Matter (miio) era and referenced by zero files in this fork. Removing express also eliminates the whole qs/body-parser/path-to-regexp advisory chain at the root instead of patching around it. Verified by full-tree usage analysis, the complete test suite, strict type checking, and a runtime load check.
|
|
9
|
+
- npm audit (production): 0 vulnerabilities. Smaller install footprint, cleaner supply-chain surface.
|
|
10
|
+
|
|
3
11
|
## 2.3.1
|
|
4
12
|
|
|
5
13
|
- **Full-home cleans now publish the run's scope as Service Area progress.** Previously a full clean cleared the progress list entirely, leaving controllers with no per-run data — which Apple Home renders as a permanent "Preparing" pill for the whole run. Every supported area is now reported as pending at start and completed when the robot returns to the charger. No area is claimed as current and currentArea stays null: the robots do not report which room they are physically inside, and the plugin does not invent one. Whether Apple's pill label improves with real scope data is up to Apple's renderer — this ships the honest maximum of what the robots expose. (Deriving the live room from the robot's map position, the way the vendor app does, remains a possible future feature.)
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "homebridge-roborock-matter",
|
|
3
|
-
"version": "2.3.
|
|
3
|
+
"version": "2.3.2",
|
|
4
4
|
"description": "Matter-only Homebridge plugin publishing Roborock robot vacuums (including 2025 B01/Q7-series) as native Matter accessories for Apple Home. Fork of homebridge-roborock-vacuum2.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"author": {
|
|
@@ -44,22 +44,13 @@
|
|
|
44
44
|
},
|
|
45
45
|
"dependencies": {
|
|
46
46
|
"@homebridge/plugin-ui-utils": "^2.1.2",
|
|
47
|
-
"abstract-things": "0.9.0",
|
|
48
47
|
"axios": "^1.13.4",
|
|
49
48
|
"binary-parser": "^2.3.0",
|
|
50
|
-
"chalk": "4.1.2",
|
|
51
49
|
"crc-32": "^1.2.2",
|
|
52
|
-
"debug": "4.3.5",
|
|
53
|
-
"deep-equal": "2.2.3",
|
|
54
|
-
"express": "^4.22.1",
|
|
55
50
|
"jszip": "^3.10.1",
|
|
56
51
|
"mqtt": "^5.15.0",
|
|
57
52
|
"node-forge": "^1.3.3",
|
|
58
|
-
"qrcode": "^1.5.4"
|
|
59
|
-
"rxjs": "^7.8.2",
|
|
60
|
-
"semver": "7.6.2",
|
|
61
|
-
"tinkerhub-discovery": "0.3.1",
|
|
62
|
-
"yargs": "15.4.1"
|
|
53
|
+
"qrcode": "^1.5.4"
|
|
63
54
|
},
|
|
64
55
|
"devDependencies": {
|
|
65
56
|
"@babel/core": "7.24.8",
|