From 5271db80d1d35fa9858be2ccac0557a32f804325 Mon Sep 17 00:00:00 2001 From: MachinePainting Date: Sat, 9 May 2026 05:52:25 -0700 Subject: [PATCH] =?UTF-8?q?v1.1.1:=20docs=20=E2=80=94=20encryption-key=20r?= =?UTF-8?q?ecovery=20procedure=20+=20screenshot=20refresh?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Documentation-only release. No code or behavior changes. • README ## Encryption key rotation gains a "Recovering files encrypted with an old key" subsection — step-by-step procedure for decrypting .enc files using a stored older key, including the v1.1.0 advisory recovery case. • Header image refreshed to show the new node UI (modal-based credential entry, no more text fields). Why a separate version: Comfy Registry treats published versions as immutable. v1.1.0's docs were captured at the moment of the first tag push. Subsequent force-pushes of the v1.1.0 tag (to add the recovery subsection and swap the header image) updated GitHub but were rejected by the registry-publish workflow with "node version already exists". v1.1.1 ships the doc delta to the registry. --- README.md | 7 +++++++ pyproject.toml | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 095ba54..deeb32b 100644 --- a/README.md +++ b/README.md @@ -496,6 +496,13 @@ ComfyUI_DropSendNode/ ## Changelog +### v1.1.1 — Docs + +Documentation-only release. No code or behavior changes. Published to ship the README delta to the Comfy Registry, since registry versions are immutable once published. + +- **New "Recovering files encrypted with an old key" subsection** under Encryption key rotation — step-by-step recovery procedure for `.enc` files encrypted under a previous key (including the v1.1.0 advisory case). +- **Header image refreshed** to show the new node UI (modal-based credential entry, no more text fields). + ### v1.1.0 — Setup Node refactor + security hardening **Security fixes (advisory):** earlier versions of the Setup Node accepted `app_key`, `app_secret`, and `auth_code` as workflow inputs and delivered credentials over a `send_sync(event, data)` call without an explicit `sid` argument. On ComfyUI hosts reachable over a network, both paths leaked credentials: diff --git a/pyproject.toml b/pyproject.toml index d97b0f0..83f8314 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,7 +1,7 @@ [project] name = "comfyui-dropsend-node" description = "Automatically upload ComfyUI output files to Dropbox with optional encryption. Supports real-time monitoring, cloud setups (RunPod), and includes cross-platform decryption scripts." -version = "1.1.0" +version = "1.1.1" license = { file = "LICENSE" } dependencies = ["requests", "python-dotenv", "watchdog", "dropbox", "cryptography"]