What's Changed
- fix(bundle): declare GPL-3.0 license and metadata in Linux packages by @alchaplinsky in #635
- chore(deps): batch the pending Dependabot updates across npm, cargo and the extension by @alchaplinsky in #636
- feat(ui): one design grammar for every entry's detail view by @alchaplinsky in #634
- build(ios): retire the swift-rs fork for the stock 1.0.9 crate by @alchaplinsky in #638
- chore(deps): lift the Tauri freeze and bump the Tauri crates and npm packages together by @alchaplinsky in #639
- fix: gate import/restore reads behind path grants, require the master password for plaintext export, keep macOS copies off Universal Clipboard by @alchaplinsky in #641
- fix: authenticate the sync delete marker and refuse HTTPS logins on HTTP pages by @alchaplinsky in #642
- ci: pin actions and SBOM tools, scan main with CodeQL, deny-check the iOS target by @alchaplinsky in #643
- feat(sync): master-password change propagates across synced devices by @alchaplinsky in #644
- chore(codeql): resolve hash_secret and site-quirk substring alerts by @alchaplinsky in #645
- fix(import): take a dropped .swftx or .rowel as a backup, not an export by @alchaplinsky in #649
- build(extension): bump dev tooling to ESLint 10 and fix the lint config for it by @alchaplinsky in #647
- feat(setup): restore a legacy .swftx vault on the first run by @alchaplinsky in #648
- feat(lockbox): one vault password, and every re-keyed lockbox syncs after a change by @alchaplinsky in #646
- chore(release): bump version to 1.0.4 by @alchaplinsky in #650
Full Changelog: v1.0.3...v1.0.4