From cb466d3865d519063a5ae62352004db854ec6ff2 Mon Sep 17 00:00:00 2001
From: MacBook <macbook@shik3i.net>
Date: Sat, 2 May 2026 02:07:22 +0200
Subject: [PATCH] chore: bump version to 1.3.1

- update manifest.base.json, package.json and index.html to v1.3.1

- add SECURITY.md file
---
 SECURITY.md                  | 23 +++++++++++++++++++++++
 extension/manifest.base.json |  2 +-
 package.json                 |  2 +-
 website/index.html           |  6 +++---
 4 files changed, 28 insertions(+), 5 deletions(-)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..8357983
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,23 @@
+# Security Policy
+
+## Supported Versions
+
+We take the security of our users and their data very seriously. We actively support and patch the latest stable releases of KoalaSync. 
+
+| Version        | Supported          |
+| -------------- | ------------------ |
+| Latest Release | :white_check_mark: |
+| Older Versions | :x:                |
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability within KoalaSync (e.g., related to the Node.js relay server, WebSocket wire protocol, or the Chrome/Firefox browser extension), please **DO NOT** report it by creating a public GitHub issue. 
+
+Publicly disclosing a vulnerability before a patch is available puts our users at risk. Instead, please send an email privately to the project administrator at:
+**koalasync_admin@koalamail.rocks**
+
+### What to expect
+1. **Acknowledgment**: You should receive an acknowledgment of your report within 48 hours.
+2. **Investigation**: We will investigate the issue, confirm its severity, and work on a patch.
+3. **Resolution**: We will notify you when the patch is deployed to the Chrome Web Store, Mozilla Add-on Store, and our GitHub Docker releases.
+4. **Disclosure**: Once the fix is confirmed and users have had time to update, we will publicly acknowledge your contribution in our release notes (unless you prefer to remain anonymous).
diff --git a/extension/manifest.base.json b/extension/manifest.base.json
index 9dfaaec..d4494aa 100644
--- a/extension/manifest.base.json
+++ b/extension/manifest.base.json
@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "KoalaSync",
-  "version": "1.2.1",
+  "version": "1.3.1",
   "description": "Watch party extension to synchronize video playback on YouTube, Twitch, Netflix, and HTML5 sites in real-time with friends.",
   "permissions": [
     "storage",
diff --git a/package.json b/package.json
index c1fa042..87c618b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "koalasync",
-  "version": "1.2.1",
+  "version": "1.3.1",
   "description": "KoalaSync Build Scripts",
   "private": true,
   "scripts": {
diff --git a/website/index.html b/website/index.html
index c7ec9b7..8649f48 100644
--- a/website/index.html
+++ b/website/index.html
@@ -70,7 +70,7 @@
     <header class="hero">
         <div class="container hero-grid">
             <div class="hero-text">
-                <div class="version-badge" data-reveal><span lang="en">v1.2.0 OUT NOW</span><span lang="de">v1.2.0 JETZT VERFÜGBAR</span></div>
+                <div class="version-badge" data-reveal><span lang="en">v1.3.1 OUT NOW</span><span lang="de">v1.3.1 JETZT VERFÜGBAR</span></div>
                 <h1 data-reveal>
                     <span lang="en">Watch Together.<br>Sync Perfectly.</span>
                     <span lang="de">Gemeinsam schauen.<br>Perfekt synchron.</span>
@@ -111,8 +111,8 @@
                 <div class="feature-card" data-reveal>
                     <div class="feature-icon">🎬</div>
                     <h3><span lang="en">Episode Auto-Sync</span><span lang="de">Automatische Episoden-Synchronisation</span></h3>
-                    <p lang="en">New in v1.2.0: Perfectly sync series binges. All peers wait until everyone has loaded the next episode.</p>
-                    <p lang="de">Neu in v1.2.0: Perfekt synchronisiertes Serien-Bingeing. Alle warten, bis jeder die nächste Episode geladen hat.</p>
+                    <p lang="en">New in v1.3.1: Perfectly sync series binges. All peers wait until everyone has loaded the next episode.</p>
+                    <p lang="de">Neu in v1.3.1: Perfekt synchronisiertes Serien-Bingeing. Alle warten, bis jeder die nächste Episode geladen hat.</p>
                 </div>
                 <div class="feature-card" data-reveal>
                     <div class="feature-icon">🛡️</div>