3.5.3 — Plugin review compliance
Changes
Plugin review compliance
- ZIP import safety: Renamed the Instagram saved-posts export's internal entry from
manifest.jsontoimport-manifest.jsonto remove the static-analysis collision with Obsidian's own plugin manifest filename. Older exports remain readable via a backward-compat fallback. - No system identity reads: Replaced every
os.userInfo()call withos.homedir()-derived equivalents (whisper, yt-dlp, ai-cli, TranscriptionService, AICommentService, TTS). The AI-CLI detection now spawns child processes with onlyPATH+HOMEinstead of inheriting the full environment, and API-key env vars are checked for presence only (never read). - No background telemetry: Removed NoticesService's 15-minute background poll. Server notices now refresh only on user signals (startup, tab visibility change, online event). Pending-job background check can be fully disabled by setting "Job check interval" to 0. Added inline disclosure on license refresh and subscription pollers.
Companion (mobile app, not in plugin)
- Naver Blog inline image rendering fix in the mobile app companion (does not affect the Obsidian plugin binary).