-
0.16.1 Stable
released this
2026-07-20 12:31:47 +00:00 | 64 commits to main since this releaseChanged
- Bumped
minAppVersionto 1.13.0. Installations on Obsidian below 1.13 will no longer receive
updates. Reason:setDestructive()— used for the three destructive-action buttons below — only
exists from 1.13 onward. - Cleared the remaining Obsidian community-store review warnings:
createSpan(…)instead of
createEl("span", …)at 7 call sites, andsetDestructive()instead of the deprecated
setWarning()at 3 call sites (reindex, MCP token regeneration, backup restore). - Removed every
node:import flagged by the store review'sno-nodejs-moduleslint. Node
operations are now injected into the read-guard instead of imported at module top level, desktop-
only code paths load Node built-ins viaawait import(…)insidePlatform.isDesktopchecks
or with early platform guards instead of static imports orrequire, and thenode:httptype
import was replaced with local structural interfaces.npm run lintnow reports zero
no-nodejs-modulesoccurrences. - The MCP server now throws explicitly when started outside a desktop platform, instead of relying
solely on its caller's guard.
Not changed
Four points the store review flags are properties of the plugin or its dependencies, not bugs, and
were left as-is:- Direct Filesystem Access —
fs.realpathin the MCP server's symlink-escape guard; desktop-only
and scoped to that one check. - Vault Enumeration — the core function of a retrieval plugin.
- Clipboard Access — write-only (
writeText), always user-initiated; the clipboard is never read. - Dynamic Code Execution —
new Functioncomes fromajv, pulled in via
@modelcontextprotocol/sdk; not code of this plugin.
Also out of scope for this slice:
getSettingDefinitions()(the declarative settings search
available from Obsidian 1.13) and thedisplay()deprecation it would resolve — both are reserved
for a separate slice.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Bumped