0.5.6

Pre-release 0.5.6

What's new

• Text Formatting Toolbar integration
• Traditional Chinese (zh-TW) translation
• Regression test suite

0.5.6-beta.4

Security fixes — no functional changes.

• Critical: shell-quote — quote() failed to escape newlines in .op values (shell injection risk in dev toolchain)
• High: esbuild bumped to 0.28.1 — missing binary integrity verification when fetching binaries

Both are dev-only dependencies and do not affect the plugin users install.

0.5.6-beta.3

ESLint compliance pass — no functional changes. Cleans up unused imports, adds explicit return types, fixes mixed indentation, and removes dead code across 15 files.

0.5.6-beta.2

What's New

Text Formatting Toolbar Integration

Commander now integrates with the new Text Formatting Toolbar plugin. When both plugins are installed, a Text Toolbar tab appears in Commander's settings, letting you add any Obsidian command to the floating formatting toolbar that appears above selected text.

Bug Fixes

• Fixed macro icons not showing in all UI contexts (#149)
• Fixed status bar commands being removed from the list when a command became temporarily unavailable (#177)
• Fixed tooltip positioning for status bar commands

Security

• Upgraded esbuild 0.15 → 0.25 and esbuild-sass-plugin 2 → 3 (#195)
• Added npm overrides to resolve 15 transitive dependency vulnerabilities (#194)

---

Note: This is a pre-release for testing the Text Formatting Toolbar integration. Install the Text Formatting Toolbar plugin alongside Commander to try it out. Feedback welcome before the stable release.

Dependabot vulnerability fixes

Security: Fixed 17 Dependabot vulnerability alerts (dev dependencies only)

All vulnerabilities were in the build toolchain and did not affect the plugin itself. No user-facing changes.

• Added version overrides for 15 transitive packages to fix high/moderate severity issues including prototype pollution (flatted, immutable, js-yaml), ReDoS vulnerabilities (minimatch, braces, picomatch, micromatch, postcss, cross-spawn, semver, nanoid, word-wrap, brace-expansion, ajv), and a stack overflow (yaml)
• Upgraded esbuild from 0.15 → 0.25 and esbuild-sass-plugin from 2.x → 3.x to fix a moderate severity issue where esbuild's dev server could be queried by any website

0.5.5

What's Changed

• Create hr.json by @hartegg in #156
• Update zh-cn.json by @niaodan2b in #150
• Added swedish locale by @grvn in #112
• Add new suppport language for Vietnamese by @Ace-Kyle in #170
• chore: add missing localization for zh-cn by @Moyf in #164

New Contributors

• @hartegg made their first contribution in #156
• @niaodan2b made their first contribution in #150
• @grvn made their first contribution in #112
• @Ace-Kyle made their first contribution in #170
• @Moyf made their first contribution in #164

Full Changelog: 0.5.4...0.5.5

0.5.4

chore: bump version

0.5.3

fix: release workflow

0.5.2

What's Changed

• Support new icon set after Obsidian 1.7.3 by @Quorafind in #141

New Contributors

• @Quorafind made their first contribution in #141

Full Changelog: 0.5.1...0.5.2

0.5.1

Update package.json