This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryUpdates Improved, Testing, and Miscellaneous across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Rooted storage adapters now reject absolute, drive-qualified, backslash-separated, traversal paths and prevent writes/appends/removals targeting the configured root. Rooted storage adapters now reject absolute, drive-qualified, backslash-separated, traversal paths and prevent writes/appends/removals targeting the configured root. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Low |
File System Access API storage can now create files below previously missing parent directories, matching Node behaviour. File System Access API storage can now create files below previously missing parent directories, matching Node behaviour. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Performance | Low |
Improves vault scanning and CLI file filtering by reusing compiled ignore patterns, reducing processing overhead for large vaults. Improves vault scanning and CLI file filtering by reusing compiled ignore patterns, reducing processing overhead for large vaults. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes loss of U+FEFF character at Rabin–Karp chunk boundary, preventing reconstructed file changes and size-mismatch conflicts. Fixes loss of U+FEFF character at Rabin–Karp chunk boundary, preventing reconstructed file changes and size-mismatch conflicts. Source: llm_adapter@2026-07-14 Confidence: high |
— |
Full changelog
0.25.81
14th July, 2026
I am releasing this update to make the chunk-boundary fix available before the next broader release. Thank you to everyone who helped reproduce, trace, and verify the issue.
Fixed
- Fixed an issue where a U+FEFF character at a Rabin–Karp chunk boundary could be lost, changing the reconstructed file and causing repeated size-mismatch conflicts (#1000).
Improved
- Improved vault scanning and CLI file filtering by reusing compiled ignore patterns, reducing processing overhead for vaults with many files or ignore rules (#1006, #1007, and #1008).
Improved (CLI and Webapp)
- Rooted storage adapters now reject absolute, drive-qualified, backslash-separated, and traversal paths. They also prevent file writes, appends, and removal from targeting the configured root itself.
- File System Access API storage can now create files below previously missing parent directories, matching the existing Node behaviour.
Testing
- Added shared Node and File System Access API storage contract coverage for metadata, text and binary operations, append, listing, removal, path containment, and empty-root handling.
- Added a Compose-based P2P end-to-end smoke test and repeatable network benchmark cases for local performance investigations.
Miscellaneous
- Split the internal storage adapter contract into focused capability views without changing existing runtime behaviour.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About obsidian-livesync
Community-developed synchronisation plugin for Obsidian supporting CouchDB, object storage, and peer-to-peer WebRTC
Beta — feedback welcome: [email protected]