[bwp91]

Changes

• ci: rename the pr-labeler caller job from stale to label
• fix: stop one accessory's invalid permissions taking down the whole bridge (Add validation of perms array, and skip bridging accessories with malformed data #1129)
• chore(deps): dependency updates

Homebridge Dependencies

• @homebridge/ciao @ v1.3.12
• @homebridge/dbus-native @ v0.7.9
• bonjour-hap @ v3.10.5

[coveralls]

Coverage Report for CI Build 32580805941

Coverage increased (+0.3%) to 66.753%

Details

• Coverage increased (+0.3%) from the base build.
• Patch coverage: 47 of 47 lines across 2 files are fully covered (100%).
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	9671
Covered Lines:	6772
Line Coverage:	70.02%
Relevant Branches:	3461
Covered Branches:	1994
Branch Coverage:	57.61%
Branches in Coverage %:	Yes
Coverage Strength:	364.86 hits per line

---

💛 - Coveralls

[Copilot]

Pull request overview

This release PR hardens HAP-NodeJS against malformed characteristic perms data originating from plugins, preventing a single bad bridged accessory from breaking the entire bridge’s HomeKit representation.

Changes:

• Add runtime validation and safe diagnostics for characteristic permission arrays (perms), including resilient formatting for malformed values.
• Quarantine bridged accessories with invalid permissions at the serving boundary (while rejecting publish for standalone/root accessories with invalid perms).
• Update dependency ranges for select Homebridge dependencies and bump dev tooling (eslint), plus changelog entry.

Reviewed changes

Copilot reviewed 6 out of 7 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
src/lib/Characteristic.ts	Adds perms validation/diagnostics and ensures warnings are emitted even when no listeners are attached yet.
src/lib/Characteristic.spec.ts	Adds unit tests for permission validation, diagnostics formatting, and warning behavior.
src/lib/Accessory.ts	Implements bridged-accessory quarantine based on invalid permission arrays; blocks publishing invalid standalone accessories.
src/lib/Accessory.spec.ts	Adds tests covering quarantine behavior, config update enqueueing, and publish blocking.
package.json	Adjusts dependency specifiers for select runtime deps and updates eslint.
package-lock.json	Lockfile updates reflecting dependency range and version changes.
CHANGELOG.md	Documents the fix and dependency updates for the release notes.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 6 out of 7 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 6 out of 7 changed files in this pull request and generated 2 comments.