From cb441bfef6bf888b7ee8f74526dd0b3498fb6b83 Mon Sep 17 00:00:00 2001
From: GeiserX <9169332+GeiserX@users.noreply.github.com>
Date: Sun, 5 Jul 2026 07:59:24 +0000
Subject: [PATCH] chore(release): bump to 0.7.3

Ships the deploy-command security hardening (S3/S2): container commands are now
built as argv with no shell, so a credential containing shell metacharacters can
no longer break a deploy or inject commands (CWE-78); Mysterium's management UI is
bound to 127.0.0.1. Verified live against all 7 command-setting services.
---
 frontend/package-lock.json | 4 ++--
 frontend/package.json      | 2 +-
 package.json               | 2 +-
 wails.json                 | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 52337bb..f0d98c8 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "cashpilot-desktop-frontend",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "cashpilot-desktop-frontend",
-      "version": "0.7.2",
+      "version": "0.7.3",
       "devDependencies": {
         "typescript": "^6.0.3",
         "vite": "^8.0.16"
diff --git a/frontend/package.json b/frontend/package.json
index a645760..bb36267 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "cashpilot-desktop-frontend",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/package.json b/package.json
index 0abfa5d..0f1875f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "cashpilot-desktop",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "private": true,
   "scripts": {
     "dev": "wails dev",
diff --git a/wails.json b/wails.json
index 15f495f..2e75b96 100644
--- a/wails.json
+++ b/wails.json
@@ -12,7 +12,7 @@
   },
   "info": {
     "productName": "CashPilot Desktop",
-    "productVersion": "0.7.2",
+    "productVersion": "0.7.3",
     "copyright": "Copyright 2026 Sergio Fernandez",
     "comments": "Local-first passive income and DePIN service manager"
   }