Psychotoxical b4b786972e chore(deps): bump rustls-webpki to 0.103.13 and postcss to 8.5.10 ...

Patches two Dependabot alerts:
- rustls-webpki 0.103.12 → 0.103.13 (high: DoS via panic on malformed CRL BIT STRING)
- postcss 8.5.8 → 8.5.10 (medium: XSS via unescaped </style> in CSS stringify output)

Both are semver-compatible patch bumps. cargo check + npm run build pass.

The remaining open Dependabot alert (glib 0.18 → 0.20) is blocked on
upstream tauri/wry/webkit2gtk pinning the gtk-rs 0.18 stack.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-25 20:23:23 +02:00

..

capabilities

feat(mini-player): expandable queue + UX polish

2026-04-19 00:46:28 +02:00

icons

feat(windows): replace GDI taskbar icons with embedded .ico assets

2026-04-09 23:14:21 +02:00

patches

chore(warnings): silence cpal lifetime + unused tray import on Windows

2026-04-19 13:56:27 +02:00

src

chore(tauri): enable devtools in dev builds only

2026-04-25 20:22:08 +02:00

build.rs

Initial release with i18n and theming

2026-03-09 19:02:57 +01:00

Cargo.lock

chore(deps): bump rustls-webpki to 0.103.13 and postcss to 8.5.10

2026-04-25 20:23:23 +02:00

Cargo.toml

revert: roll back flatpak packaging experiment (#271 + follow-ups) (#297)

2026-04-24 22:50:06 +02:00

Entitlements.plist

feat(lyrics): YouLyPlus karaoke + fix(macos): suppress mic prompt

2026-04-17 21:30:31 +02:00

Info.plist

fix(macos): remove NSMicrophoneUsageDescription to suppress spurious mic prompt

2026-04-17 15:38:40 +02:00

tauri.conf.json

chore(tauri): enable devtools in dev builds only

2026-04-25 20:22:08 +02:00