pi-spotify-widget 0.1.8 → 0.1.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +19 -1
- package/README.md +3 -1
- package/SECURITY.md +20 -0
- package/package.json +6 -5
package/CHANGELOG.md
CHANGED
|
@@ -2,9 +2,27 @@
|
|
|
2
2
|
|
|
3
3
|
## Unreleased
|
|
4
4
|
|
|
5
|
+
## [0.1.10] - 2026-08-22
|
|
6
|
+
|
|
7
|
+
### Changed
|
|
8
|
+
|
|
9
|
+
- Merge the 2026-08-22 managed OSS dependency and maintenance PR batch.
|
|
10
|
+
|
|
11
|
+
## [0.1.9] - 2026-08-04
|
|
12
|
+
|
|
13
|
+
### Changed
|
|
14
|
+
|
|
15
|
+
- Bump package version for the Discord release webhook verification.
|
|
16
|
+
|
|
17
|
+
## [0.1.8] - 2026-07-20
|
|
18
|
+
|
|
19
|
+
### Fixed
|
|
20
|
+
|
|
21
|
+
- Align README release command with `npm version patch --no-git-tag-version` so tagging stays with `auto-release.yml`.
|
|
22
|
+
|
|
5
23
|
### Changed
|
|
6
24
|
|
|
7
|
-
-
|
|
25
|
+
- Add `version:check` PR guard and align CI bootstrap with the Pi extension template.
|
|
8
26
|
|
|
9
27
|
## [0.1.7] - 2026-07-04
|
|
10
28
|
|
package/README.md
CHANGED
|
@@ -1,4 +1,6 @@
|
|
|
1
1
|
# pi-spotify-widget
|
|
2
|
+
|
|
3
|
+
[](https://discord.gg/4945dXZVW5)
|
|
2
4
|
|
|
3
5
|
[](https://github.com/eiei114/pi-spotify-widget/actions/workflows/ci.yml)
|
|
4
6
|
[](https://github.com/eiei114/pi-spotify-widget/actions/workflows/publish.yml)
|
|
@@ -180,4 +182,4 @@ Review extensions before installing third-party packages. For vulnerability repo
|
|
|
180
182
|
|
|
181
183
|
## License
|
|
182
184
|
|
|
183
|
-
MIT
|
|
185
|
+
MIT
|
package/SECURITY.md
ADDED
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
# Security Policy
|
|
2
|
+
|
|
3
|
+
## Supported versions
|
|
4
|
+
|
|
5
|
+
Only the latest published version receives security fixes.
|
|
6
|
+
|
|
7
|
+
## Reporting a vulnerability
|
|
8
|
+
|
|
9
|
+
Open a private security advisory on GitHub, or contact the maintainer by the preferred channel listed in the repository profile.
|
|
10
|
+
|
|
11
|
+
Please include:
|
|
12
|
+
|
|
13
|
+
- Affected version
|
|
14
|
+
- Impact
|
|
15
|
+
- Reproduction steps
|
|
16
|
+
- Suggested fix, if known
|
|
17
|
+
|
|
18
|
+
## Pi package security note
|
|
19
|
+
|
|
20
|
+
Pi packages can execute code with local user permissions. Review installed packages and avoid running untrusted extensions.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "pi-spotify-widget",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.10",
|
|
4
4
|
"description": "Lightweight Spotify Now Playing widget for Pi Coding Agent.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "MIT",
|
|
@@ -24,6 +24,7 @@
|
|
|
24
24
|
"lib/",
|
|
25
25
|
"docs/",
|
|
26
26
|
"README.md",
|
|
27
|
+
"SECURITY.md",
|
|
27
28
|
"LICENSE",
|
|
28
29
|
"CHANGELOG.md",
|
|
29
30
|
"skills/"
|
|
@@ -53,11 +54,11 @@
|
|
|
53
54
|
"typebox": "*"
|
|
54
55
|
},
|
|
55
56
|
"devDependencies": {
|
|
56
|
-
"@earendil-works/pi-ai": "^0.
|
|
57
|
-
"@earendil-works/pi-coding-agent": "^0.
|
|
57
|
+
"@earendil-works/pi-ai": "^0.84.1",
|
|
58
|
+
"@earendil-works/pi-coding-agent": "^0.84.1",
|
|
58
59
|
"@earendil-works/pi-tui": "latest",
|
|
59
60
|
"typebox": "latest",
|
|
60
|
-
"@types/node": "^
|
|
61
|
-
"typescript": "^
|
|
61
|
+
"@types/node": "^26.0.0",
|
|
62
|
+
"typescript": "^7.0.2"
|
|
62
63
|
}
|
|
63
64
|
}
|