Skip to content

Address the community directory's automated review (0.3.1) - #3

Merged
wandermyz merged 3 commits into
mainfrom
review-fixes
Oct 18, 2026
Merged

wandermyz merged 3 commits into
mainfrom
review-fixes

Conversation

@wandermyz

Copy link
Copy Markdown
Owner

Fixes the findings from the Obsidian community directory's automated review.

  • Missing artifact attestations (main.js, styles.css): new release.yml. A pushed version tag builds, lints and tests the tagged commit, attests main.js, manifest.json and styles.css with actions/attest-build-provenance, and creates a draft release.
  • "builtin-modules should be replaced": now uses Node's builtinModules. main.js is byte-for-byte unchanged.
  • Clipboard access: disclosed in the README. Copy code only writes the one-time device code; nothing reads the clipboard.
  • Release commit for 0.3.1.

🤖 Generated with Claude Code

wandermyz and others added 3 commits October 18, 2026 01:52
- Release assets now carry build-provenance attestations: a release workflow
  builds, lints and tests the tagged commit, attests main.js, manifest.json
  and styles.css, and creates a draft release with them.
- Drop the builtin-modules package for Node's own builtinModules list. The
  bundle is byte-for-byte unchanged.
- Disclose clipboard use in the README: the sign-in dialog's Copy code
  button writes the device code; nothing reads the clipboard.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Reads by path right after a push can briefly see the previous head and 404.
Seen once in CI on the mobile run; the push itself had succeeded.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@wandermyz
wandermyz merged commit 0e7a235 into main Oct 18, 2026
3 checks passed
@wandermyz
wandermyz deleted the review-fixes branch October 18, 2026 09:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant