Hooter

v1.0.3 (2026-09-03)

Full Changelog Previous Releases

• Bump interface to 12.1 and derive version from the packager (#3)

  Interface was still 120001 (12.0.1), so the addon showed as

  out-of-date on 12.1.0. Bump it to 120100.
  Both ## Version: and Hooter.VERSION were hardcoded "1.0.0". The
  BigWigs packager does no automatic version injection -- it only does
  keyword substitution -- so every release since v1.0.0 has shipped
  reporting itself as 1.0.0. Use @project-version@ in both places, with a
  "dev" fallback in Init.lua for unpackaged source checkouts.
• Declare issecretvalue in luacheck globals
  The secret-value guard reads the global issecretvalue, which luacheck
  flagged as an undefined variable and failed CI on.
  Co-Authored-By: Claude Opus 5 (1M context) noreply@anthropic.com
• Guard chat handlers against 12.x secret values
  While chat messaging lockdown is active (Mythic+ run, PvP match, or
  instance encounter in progress), the client hands CHAT_MSG_* payloads to
  Lua as secret values. Tainted code may store, pass and concatenate them,
  but indexing, comparing or measuring one raises an immediate Lua error --
  so Scanner's message:find("!", 1, true) threw on every message received
  during a key, spamming thousands of errors.
  Add a shared Hooter:IsChatRestricted() helper and bail out early from the
  three handlers that inspect chat payloads: OnChatMessage, the
  FilterChatMessage chat filter (which passes the message through
  untouched so it still displays), and CHAT_MSG_ADDON.
  Addons cannot send chat or addon comms during lockdown either, so there
  is nothing useful to do with a restricted payload -- silence is the only
  correct behavior here, not a workaround.
  Co-Authored-By: Claude Opus 5 (1M context) noreply@anthropic.com