0.2.3 — Security scan fixes (no behavior change) Addresses all 8 findings reported by the plugin portal's Bandit scan on 0.2.2: - Self-updater now downloads via http.client and accepts only http/https URLs (no file: or custom schemes); it follows the GitHub release redirect to the CDN and still enforces https for the ZIP download and the 20 MB size cap. - The six empty try/except/pass blocks were replaced with contextlib.suppress scoped to the specific expected exceptions (missing certifi, closing an already-dead socket, QGIS log/message bar unavailable during shutdown). Verified: Bandit reports 0 issues; version check over https (production) and http (local dev); ZIP download through the GitHub redirect; file:/ftp:/http: rejected for downloads; headless smoke test of the real plugin on QGIS 3.40 (14/14 passing). 0.2.2 — metadata homepage now points to the public GitHub repository (the community connector page requires login).
yes
guilhermesanches
2026-09-15T19:37:34.919176+00:00
3.28.0
4.99.0
yes
Plugin Tags