chore: release v1.109.0

.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Skills shared by Baoyu for improving daily work efficiency",
-    "version": "1.108.0"
+    "version": "1.109.0"
   },
   "plugins": [
     {

CHANGELOG.md

@@ -2,6 +2,18 @@
 
 English | [中文](./CHANGELOG.zh.md)
 
+## 1.109.0 - 2026-04-21
+
+### Features
+- `baoyu-url-to-markdown`: vendor the `baoyu-fetch` runtime into `scripts/lib` and run it through a local `scripts/baoyu-fetch` CLI so published skill installs are self-contained
+
+### Fixes
+- `baoyu-fetch`: extract playable X/Twitter video MP4 variants for single posts and X Articles, choosing the highest-bitrate MP4 and rendering article videos as `[video](...)`
+- `sync-clawhub`: publish from the shared release file list so extensionless CLI entrypoints, `bun.lock`, and vendored `scripts/lib` files are uploaded
+
+### Maintenance
+- Upgrade `defuddle` to 0.17.0 and `jsdom` to 29.0.2; override `@xmldom/xmldom` to 0.8.13 to keep the Defuddle dependency chain vulnerability-free
+
 ## 1.108.0 - 2026-04-19
 
 ### Refactor

CHANGELOG.zh.md

@@ -2,6 +2,18 @@
 
 [English](./CHANGELOG.md) | 中文
 
+## 1.109.0 - 2026-04-21
+
+### 新功能
+- `baoyu-url-to-markdown`：将 `baoyu-fetch` 运行时代码 vendored 到 `scripts/lib`，并通过本地 `scripts/baoyu-fetch` CLI 调用，使发布后的技能安装不再依赖 `baoyu-fetch` npm 包
+
+### 修复
+- `baoyu-fetch`：修复 X/Twitter 单条内容与 X Article 的视频解析，提取可播放的最高码率 MP4，并将文章视频渲染为 `[video](...)`
+- `sync-clawhub`：改用共享 release 文件清单发布，确保无扩展名 CLI 入口、`bun.lock` 和 vendored `scripts/lib` 文件都会被上传
+
+### 维护
+- 将 `defuddle` 升级到 0.17.0、`jsdom` 升级到 29.0.2，并通过 override 将 `@xmldom/xmldom` 固定到 0.8.13，清除 Defuddle 依赖链上的漏洞提示
+
 ## 1.108.0 - 2026-04-19
 
 ### 重构

packages/baoyu-fetch/CHANGELOG.md

@@ -5,6 +5,21 @@ English | [简体中文](./CHANGELOG.zh-CN.md)
 The format is inspired by Keep a Changelog, and the project follows Semantic
 Versioning.
 
+## [0.1.2] - 2026-04-21
+
+#### Changed
+
+- Upgraded Defuddle to 0.17.0 and jsdom to 29.0.2 for generic extraction.
+- Added an `@xmldom/xmldom` override to keep the optional Defuddle MathML
+  dependency chain on a non-vulnerable release.
+
+#### Fixed
+
+- Fixed X/Twitter video extraction for single posts and X Articles by selecting
+  the highest-bitrate MP4 variant instead of the preview image URL.
+- Fixed X Article media rendering so video entities are emitted as
+  `[video](...)` links instead of image embeds.
+
 ## [0.1.1] - 2026-03-27
 
 #### Added

packages/baoyu-fetch/CHANGELOG.zh-CN.md

@@ -4,6 +4,18 @@
 
 格式参考 Keep a Changelog，版本号遵循 Semantic Versioning。
 
+## [0.1.2] - 2026-04-21
+
+### 变更
+
+- 将 Defuddle 升级到 0.17.0、jsdom 升级到 29.0.2，用于通用页面提取。
+- 新增 `@xmldom/xmldom` override，使 Defuddle 的可选 MathML 依赖链保持在无漏洞版本。
+
+### 修复
+
+- 修复 X/Twitter 单条内容和 X Article 的视频提取逻辑，改为选择最高码率 MP4 变体，而不是预览图 URL。
+- 修复 X Article 媒体渲染，视频实体现在输出为 `[video](...)` 链接，而不是图片嵌入。
+
 ## [0.1.1] - 2026-03-27
 
 ### 新增