homebridge-sonos-scenes 0.1.41 → 0.1.43

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -84,7 +84,7 @@ This repo uses GitHub Actions trusted publishing to publish to npm from a GitHub
84
84
  - `TV` support is still transport-gated and conservative
85
85
  - `local_plus_cloud` is not yet wired into runtime playback
86
86
  - subscription-driven live refresh is not fully implemented yet
87
- - `npm audit` currently reports a high-severity advisory in the transitive `ip` dependency pulled in by `sonos`
87
+ - `npm audit` reports a high-severity advisory ([GHSA-2p57-rm9w-gvfp](https://github.com/advisories/GHSA-2p57-rm9w-gvfp)) in the transitive `ip` dependency pulled in by `sonos`. No patched `ip` release exists. The flagged code is only reachable through the `sonos` package's UPnP event listener, which this plugin does not start, so the advisory is not exploitable through this plugin today. The longer-term fix under evaluation is moving the local transport to a maintained Sonos library that does not depend on `ip`.
88
88
 
89
89
  ## References
90
90
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "homebridge-sonos-scenes",
3
- "version": "0.1.41",
3
+ "version": "0.1.43",
4
4
  "description": "Homebridge plugin for Sonos workflow scenes and orchestration.",
5
5
  "author": "applemanj",
6
6
  "homepage": "https://github.com/applemanj/homebridge-sonos-scenes#readme",
@@ -38,7 +38,7 @@
38
38
  "homekit"
39
39
  ],
40
40
  "engines": {
41
- "homebridge": "^1.8.0 || ^2.0.0-beta.0",
41
+ "homebridge": "^1.8.0 || ^2.0.0-beta.0 || ^2.1.1-beta.1",
42
42
  "node": "^18.20.0 || ^20.18.0 || ^22.0.0 || ^24.0.0"
43
43
  },
44
44
  "dependencies": {
@@ -46,7 +46,7 @@
46
46
  "sonos": "^1.14.3"
47
47
  },
48
48
  "peerDependencies": {
49
- "homebridge": "^1.8.0 || ^2.0.0-beta.0"
49
+ "homebridge": "^1.8.0 || ^2.0.0-beta.0 || ^2.1.1-beta.1"
50
50
  },
51
51
  "devDependencies": {
52
52
  "@types/node": "^22.15.21",