From 2d95c42aa457a400a13afe7bbd368ec44567a6f2 Mon Sep 17 00:00:00 2001
From: Forkbert <195474304+tylerbrevard@users.noreply.github.com>
Date: Sat, 19 Sep 2026 23:13:07 -0400
Subject: [PATCH] plugin-catalog: repin localsend to the security-hardened
 revision
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Pins the localsend catalog entry to 28dfd30ccd — the revision that merges
the catalog security review's hardening (teknium1's review on this PR:
share-root allowlist with realpath checks on send and receive, LAN-only
peer gate, mandatory PIN with crypto-safe generation, 2 GiB transfer cap),
plus bumps the entry to v1.19.0.
---
 plugin-catalog/localsend.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin-catalog/localsend.yaml b/plugin-catalog/localsend.yaml
index a3d2413db3..d42d9ba07b 100644
--- a/plugin-catalog/localsend.yaml
+++ b/plugin-catalog/localsend.yaml
@@ -1,6 +1,6 @@
 name: localsend
 repo: https://github.com/tylerbrevard/hermes-localsend
-sha: 0bd57a37ed53c50eb34b03c5c845d0ced7eb9bef
+sha: 28dfd30ccdca6ca5baf30ca13326ea7f0d4c755d
 description: Peer-to-peer file transfer over the LocalSend protocol - discover the phones, laptops and
   tablets on your LAN, send files to them, and run a headless receiver so they can send files back.
   Ships a desktop pane, a status-bar chip and three palette commands, and speaks LocalSend's default
@@ -9,8 +9,8 @@ maintainer: tylerbrevard
 tier: community
 category: desktop
 docs_url: https://github.com/tylerbrevard/hermes-localsend#readme
-version: "1.18.0"
-image: https://raw.githubusercontent.com/tylerbrevard/hermes-localsend/0bd57a37ed53c50eb34b03c5c845d0ced7eb9bef/docs/banner.png
+version: "1.19.0"
+image: https://raw.githubusercontent.com/tylerbrevard/hermes-localsend/28dfd30ccdca6ca5baf30ca13326ea7f0d4c755d/docs/banner.png
 platforms: []
 requires_hermes: ">=0.21.3"
 capabilities: