From 7ef9c9441548e4a5309010644710bdae7be34a02 Mon Sep 17 00:00:00 2001 From: MedicalZZ <249457842+mediaclzz@users.noreply.github.com> Date: Sun, 13 Sep 2026 20:04:46 +0800 Subject: [PATCH] Prepare ChatGPT NET 1.5.1 release --- README.md | 6 +++++- docs/RELEASE_NOTES_1.5.1.md | 28 +++++++++++++++++++++++++ manifest.json | 2 +- package-lock.json | 4 ++-- package.json | 2 +- tests/firefox_extension_integration.mjs | 2 +- tests/static_audit.js | 2 +- 7 files changed, 39 insertions(+), 7 deletions(-) create mode 100644 docs/RELEASE_NOTES_1.5.1.md diff --git a/README.md b/README.md index f7cf7df..4cfb0e0 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,8 @@ -# ChatGPT NET 1.5.0 +# ChatGPT NET 1.5.1 + +1.5.1 更新构建工具及依赖安全修复，扩展功能沿用 1.5 基线。 / Version 1.5.1 ships the build dependency security update with the same 1.5 functionality. + +[1.5.1 发布说明 / Release notes](docs/RELEASE_NOTES_1.5.1.md) ## 项目介绍 / Overview diff --git a/docs/RELEASE_NOTES_1.5.1.md b/docs/RELEASE_NOTES_1.5.1.md new file mode 100644 index 0000000..9ef49c8 --- /dev/null +++ b/docs/RELEASE_NOTES_1.5.1.md @@ -0,0 +1,28 @@ +# ChatGPT NET 1.5.1 + +## 更新内容 / Changes + +- 构建工具 web-ext 从 8.10.0 升级并固定到 10.6.0，更新锁文件，处理已发现的可修复开发依赖漏洞。 +- Upgrade the pinned web-ext build tool from 8.10.0 to 10.6.0 and refresh its dependency tree to address fixable development dependency advisories. +- 修复阻碍依赖升级的静态版本断言，增加 Windows 扩展构建 CI；Firefox 集成测试自动读取当前版本的 XPI 文件名。 +- Fix the hard-coded builder version check, add Windows package-build CI, and derive the Firefox integration-test XPI filename from the manifest version. +- 扩展功能沿用 1.5 基线；运行代码与 1.5.0 一致，仅 manifest 中的产品版本更新为 1.5.1。 +- Extension functionality follows the 1.5 baseline. Runtime code is unchanged from 1.5.0; the manifest product version is updated to 1.5.1. + +## 安装 / Installation + +需要 Firefox 152 或更新版本。下载 ZIP 后，打开 about:debugging#/runtime/this-firefox，选择“临时载入附加组件”，加载 ZIP 或解压后的 manifest.json。 + +Requires Firefox 152 or newer. Download the ZIP, open about:debugging#/runtime/this-firefox, and use “Load Temporary Add-on” to select the ZIP or the extracted manifest.json. + +ZIP/XPI 尚未经 Mozilla 签名，仅供临时加载；重启 Firefox 后需重新加载。请备份重要笔记。 + +The ZIP/XPI is not Mozilla-signed and is intended for temporary loading; reload it after restarting Firefox and back up important notes. + +## 已知限制 / Known limitations + +image-size 的两项上游图片解析漏洞尚无已发布的补丁。npm audit 会将其及父依赖链报告为 3 个 high 告警包；该 lint 工具依赖不包含在扩展安装包中。详情参见 [构建依赖安全说明](BUILD_DEPENDENCY_SECURITY.md)。 + +Two upstream image-size parsing vulnerabilities have no published fix. npm audit reports three high-severity package entries including parent dependencies. This lint-tool dependency is not included in the extension package. See [build dependency security notes](BUILD_DEPENDENCY_SECURITY.md). + +License: MIT. Copyright (c) 2026 MedicalZZ. diff --git a/manifest.json b/manifest.json index 3fefe9c..65a4fad 100644 --- a/manifest.json +++ b/manifest.json @@ -1,7 +1,7 @@ { "manifest_version": 3, "name": "ChatGPT NET", - "version": "1.5.0", + "version": "1.5.1", "description": "Local manual hierarchy network canvas for ChatGPT conversations.", "permissions": [ "storage" diff --git a/package-lock.json b/package-lock.json index 37bd805..89087a5 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "chatgpt-net", - "version": "1.5.0", + "version": "1.5.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "chatgpt-net", - "version": "1.5.0", + "version": "1.5.1", "devDependencies": { "web-ext": "10.6.0" } diff --git a/package.json b/package.json index 283621d..58c327d 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "chatgpt-net", - "version": "1.5.0", + "version": "1.5.1", "private": true, "type": "commonjs", "scripts": { diff --git a/tests/firefox_extension_integration.mjs b/tests/firefox_extension_integration.mjs index 88b0322..30a5da6 100644 --- a/tests/firefox_extension_integration.mjs +++ b/tests/firefox_extension_integration.mjs @@ -6,7 +6,7 @@ const root=resolve(import.meta.dirname,'..'); const firefox=process.env.CHATGPT_NET_FIREFOX; if(!firefox)throw new Error('Set CHATGPT_NET_FIREFOX to your Firefox executable before running this integration test.'); const driver=process.env.CHATGPT_NET_GECKODRIVER||resolve(root,'output','geckodriver','geckodriver.exe'); -const xpi=process.env.CHATGPT_NET_XPI||resolve(root,'dist','ChatGPT-NET-1.5.0.xpi'); +const xpi=process.env.CHATGPT_NET_XPI||resolve(root,'dist','ChatGPT-NET-'+JSON.parse(readFileSync(resolve(root,'manifest.json'),'utf8')).version+'.xpi'); const output=resolve(root,'output','firefox'); const port=Number(process.env.CHATGPT_NET_WEBDRIVER_PORT||4545),base=`http://127.0.0.1:${port}`; mkdirSync(output,{recursive:true}); diff --git a/tests/static_audit.js b/tests/static_audit.js index d9daf2f..7c5f6eb 100644 --- a/tests/static_audit.js +++ b/tests/static_audit.js @@ -56,7 +56,7 @@ assert.deepStrictEqual([...recheck150.matchAll(/^\| (\d+) \|/gm)].map(m=>Number( const manifest=JSON.parse(fs.readFileSync(path.join(root,'manifest.json'),'utf8')); assert.strictEqual(manifest.manifest_version,3); assert.strictEqual(manifest.name,'ChatGPT NET'); -assert.strictEqual(manifest.version,'1.5.0'); +assert.strictEqual(manifest.version,'1.5.1'); assert.deepStrictEqual(manifest.permissions,['storage'],'only storage permission is required'); assert.deepStrictEqual(new Set(manifest.host_permissions),new Set(['https://chatgpt.com/*','https://chat.openai.com/*'])); assert.ok(parseFloat(manifest.browser_specific_settings.gecko.strict_min_version)>=152);