hicccc77
d537d81f1c
fix(deps): 修复安全漏洞
2026-03-28 21:15:14 +08:00
hicccc77
26c6700152
fix: 修复 CodeQL code scanning warning 问题
2026-03-28 21:12:29 +08:00
hicccc77
49fb96d7a3
Revert "Revert "fix(deps): 修复安全漏洞""
...
This reverts commit d256ee5696 .
2026-03-28 19:29:17 +08:00
hicccc77
d256ee5696
Revert "fix(deps): 修复安全漏洞"
...
This reverts commit 06079659af .
2026-03-28 19:28:45 +08:00
hicccc77
bd70a7bfa8
Revert "fix: 修复 Linux 下内存扫描找不到微信进程的问题\n\n增加 pidof/pgrep/ps aux 三重兜底逻辑,兼容不同发行版\n(flatpak、AppImage、wechat-bin 等安装方式),解决 #575 "
...
This reverts commit 3fb09bad0d .
2026-03-28 19:28:45 +08:00
hicccc77
3fb09bad0d
fix: 修复 Linux 下内存扫描找不到微信进程的问题\n\n增加 pidof/pgrep/ps aux 三重兜底逻辑,兼容不同发行版\n(flatpak、AppImage、wechat-bin 等安装方式),解决 #575
2026-03-28 19:05:21 +08:00
hicccc77
06079659af
fix(deps): 修复安全漏洞
2026-03-28 17:36:28 +08:00
hicccc77
22d8049c2c
Revert "fix: 兼容微信新目录结构多一层嵌套导致账号目录识别失败的问题"
...
This reverts commit 5f6b0e8960 .
2026-03-28 17:30:56 +08:00
hicccc77
5f6b0e8960
fix: 兼容微信新目录结构多一层嵌套导致账号目录识别失败的问题
...
修复 scanWxids 和 scanWxidCandidates 在 2.0b4.0.9/xwechat_files/wxid_xxx
结构下扫描不到账号目录的问题,增加往下多扫一层的兜底逻辑
Fixes #541
2026-03-28 17:28:52 +08:00
hicccc77
9b8da7774d
fix: 替换失效的 downloads badge 为 shields.io
2026-03-28 17:05:33 +08:00
hicccc77
eabed55a7a
fix: 修复 README Downloads badge 嵌套在 Issues 链接内的问题
2026-03-28 17:03:28 +08:00
hicccc77
32cc74f99c
merge: 同步 main 最新代码到 dev(依赖更新、版本 4.3.0、资源文件)
2026-03-28 16:54:47 +08:00
cc
ffc4cc3d96
Merge pull request #574 from hicccc77/dependabot/npm_and_yarn/npm_and_yarn-8abc9b7730
...
chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates
2026-03-28 16:50:28 +08:00
dependabot[bot]
007cf57efd
chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates
...
Bumps the npm_and_yarn group with 3 updates in the / directory: [minimatch](https://github.com/isaacs/minimatch ), [brace-expansion](https://github.com/juliangruber/brace-expansion ) and [rollup](https://github.com/rollup/rollup ).
Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
Updates `brace-expansion` from 1.1.12 to 1.1.13
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13 )
Updates `rollup` from 4.55.1 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v4.55.1...v4.60.0 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: brace-expansion
dependency-version: 1.1.13
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: rollup
dependency-version: 4.60.0
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-28 07:56:41 +00:00
hicccc77
c6dba71197
fix: 修复 macOS release notes 中 xattr 命令被 bash 吞掉的问题
2026-03-28 15:55:11 +08:00
cc
8aa162e294
Merge pull request #568 from hicccc77/dependabot/npm_and_yarn/npm_and_yarn-1ca40131d0
...
chore(deps): bump @tootallnate/once from 2.0.0 to removed in the npm_and_yarn group across 1 directory
2026-03-28 14:51:11 +08:00
dependabot[bot]
51d6dec7ff
chore(deps): bump @tootallnate/once
...
Bumps the npm_and_yarn group with 1 update in the / directory: [@tootallnate/once](https://github.com/TooTallNate/once ).
Removes `@tootallnate/once`
---
updated-dependencies:
- dependency-name: "@tootallnate/once"
dependency-version:
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-27 22:39:12 +00:00
hicccc77
f1b2762769
fix(deps): 修复安全漏洞
2026-03-28 06:37:44 +08:00
hicccc77
d126be2aa5
chore: 更新资源文件
2026-03-27 22:03:27 +08:00
hicccc77
ea034ee76a
ci: fix pnpm audit exit code causing job failure
2026-03-27 21:43:16 +08:00
hicccc77
39634a690c
fix(deps): remove ajv override to fix electron-builder compatibility
2026-03-27 21:09:28 +08:00
hicccc77
a7001eb6da
fix(deps): upgrade react-router-dom to 7.13.2 and add pnpm overrides for security vulnerabilities
...
- Upgrade react-router-dom ^7.1.1 -> ^7.13.2
- Add pnpm.overrides to force safe versions of: tar, minimatch, rollup,
immutable, lodash, ajv, brace-expansion, picomatch
2026-03-27 21:04:44 +08:00
hicccc77
71e3540f18
ci: add gitleaks config to suppress false positives
2026-03-27 20:58:14 +08:00
hicccc77
78cadfd352
ci: add security-events write permission for CodeQL
2026-03-27 19:12:31 +08:00
hicccc77
da15f829d3
ci: add security-events write permission for CodeQL
2026-03-27 19:12:20 +08:00
hicccc77
bb60694013
ci: fix pnpm install frozen-lockfile issue
2026-03-27 18:17:26 +08:00
hicccc77
b3758d2baf
ci: fix pnpm install frozen-lockfile issue
2026-03-27 18:17:14 +08:00
hicccc77
bc794e9a44
ci: add daily security scan workflow for all branches
2026-03-27 17:59:09 +08:00
hicccc77
c80115d0f7
ci: add daily security scan workflow for all branches
2026-03-27 17:56:35 +08:00
xuncha
6277576249
Merge pull request #560 from JiQingzhe2004/main
...
feat: 强制更新支持 minimumVersion,阻止低版本用户继续使用
2026-03-27 15:23:02 +08:00
JiQingzhe2004
2201d369fa
chore: bump version to 4.3.0
2026-03-27 14:43:33 +08:00
JiQingzhe2004
9f4e4790f5
feat: 强制更新支持 minimumVersion,阻止低版本用户继续使用
2026-03-27 14:43:08 +08:00
xuncha
501e373e38
Merge pull request #559 from xunchahaha/main
...
更新打包
2026-03-27 13:10:50 +08:00
xuncha
b2cf7c92d5
更新打包
v4.2.1
2026-03-27 13:10:27 +08:00
xuncha
e92e13c045
Merge pull request #558 from hicccc77/xunchahaha-patch-1
...
Delete preinstall.js
2026-03-27 12:59:45 +08:00
xuncha
f3dec958b0
Delete preinstall.js
2026-03-27 12:48:42 +08:00
hicccc77
0cf8ea8166
chore: bump version to 4.2.0
v4.2.0
2026-03-26 23:20:42 +08:00
hicccc77
74b830dd79
chore: update service files and xkey_helper
...
- xkey_helper: use mach exception port to intercept EXC_BREAKPOINT,
fixes key capture failure on macOS 26.2
2026-03-26 23:19:08 +08:00
cc
8668c168a7
333
2026-03-26 22:43:59 +08:00
cc
8b8c5f33ce
333
2026-03-26 22:34:50 +08:00
cc
2fcbb026df
222
2026-03-26 22:32:33 +08:00
cc
66ee72380d
222
2026-03-26 22:30:21 +08:00
cc
4f16345351
111
2026-03-26 22:26:33 +08:00
cc
5110618996
再次修复
2026-03-26 22:19:30 +08:00
cc
bf51368cf4
修复密钥问题
2026-03-26 22:16:30 +08:00
cc
d6054745d6
修复macos打包错误
2026-03-26 22:00:42 +08:00
hicccc77
a4731f25f8
chore: update xkey_helper (macOS) with pure semantic scan mode
...
Always use pure semantic scan mode (KNOWN_RVA=0) regardless of
WeChat version, improving compatibility for versions < 4.1.8.
2026-03-26 21:16:14 +08:00
hicccc77
6c4507e495
fix(ci): remove invalid --no-fail-on-no-release flag from gh release edit
2026-03-26 20:33:18 +08:00
hicccc77
c8e0160d5c
fix(ci): use bash shell for Windows packaging steps to avoid PowerShell variable expansion
v4.1.8
2026-03-26 20:21:13 +08:00
hicccc77
ac40a81901
fix(ci): pre-release placeholder + fix latest.yml arm64 overwrite
...
- Add prepare-release job: immediately marks release as pre-release
with "正在构建中,请勿下载" notice; all build jobs depend on it
- Fix arm64 job channel override: use -c.publish.channel=latest-arm64
(correct syntax) instead of broken single-quoted CLI arg
- Fix artifactName quoting for both win x64 and arm64 jobs
- Add "Fix latest.yml" step in update-release-notes: downloads x64 exe,
computes correct sha512/size, uploads latest.yml with --clobber
- Final step in update-release-notes: remove prerelease flag, mark as
latest official release
Fixes #553
2026-03-26 19:57:45 +08:00