Release v1.0.2: addon catalog index

.github/workflows/security-audit.yml

@@ -20,12 +20,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Install stable Rust toolchain
-        uses: dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable
+        uses: dtolnay/rust-toolchain@18f0487477426dce244608110aa2660c2893deb7 # stable
         with:
           toolchain: stable
 

CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 2026-11-03 — v1.0.2
+
+Release train v1.0.2 (catalog schema 1, catalog_version 1.0.2).
+
+### Dependency updates
+
+- Updated the workspace lockfile with semver-compatible patches: `libc` 0.2.191, `libredox` 0.1.25, `objc2` 0.6.5, `redox_users` 0.5.3, `serde_json` 1.0.154, `syn` 3.0.9, `thiserror` 2.0.21, `thiserror-impl` 2.0.21 and `unicode-ident` 1.0.27.
+- `gauges` 0.2.1: moved to `sysinfo` 0.40.1 and adapted the fallible constructors and the removal of `Disks::list()`. The measurements and output format are unchanged.
+- `theme-manager` 0.2.1: moved to `dirs` 7.0.0. The `dirs::config_dir()` call is unchanged.
+- Updated the security-audit workflow to `actions/checkout` 7.0.1 and the pinned `dtolnay/rust-toolchain` commit.
+- Regenerated `index.json` so the catalog reports the new `gauges` and `theme-manager` versions.
+
+### Addon catalog index
+
+- Added the root `index.json`, a machine-readable addon catalog consumed by `xfetch plugin search` and the other remote addon discovery commands.
+- Added `scripts/generate_catalog.py` to regenerate the catalog from each plugin's `Cargo.toml` or `xfetch-plugin.json`; `--check` fails when the committed index is stale.
+- The catalog lists all 20 addons, sorted by name. Native entries use `runtime: "native"` and WebAssembly entries use `runtime: "wasm"` with their manifest capabilities preserved.
+- Documented `banner`, `gauges` and `langs` in the README and platform compatibility tables. All three were already present in `index.json`.
+- Crate versions remain 0.2.0 except `banner-text` 0.1.0, `gauges` 0.2.1 and `theme-manager` 0.2.1; the catalog version is 1.0.2.
+
 ## 2026-10-24 — Dependency security automation
 
 - Added `.github/workflows/security-audit.yml`: runs `cargo audit` 0.22.2 with `--deny warnings` on push, pull request and a weekly schedule, with actions pinned by commit SHA and no persisted checkout credentials.

README.md

@@ -37,6 +37,10 @@
       <td><code>animate-logo</code></td>
       <td>Animated ASCII logos with sweep, wave, rainbow, sparkle, breathing, and frame modes.</td>
     </tr>
+    <tr>
+      <td><code>banner</code></td>
+      <td>Prints a Chinese/Japanese proverb banner under or above the ASCII logo; requires a CJK-capable terminal font.</td>
+    </tr>
     <tr>
       <td><code>banner-text</code></td>
       <td>Emits text lines from a file or literal argument; works with image logos.</td>
@@ -49,10 +53,18 @@
       <td><code>docker</code></td>
       <td>Displays Docker container statistics using the local Docker CLI.</td>
     </tr>
+    <tr>
+      <td><code>gauges</code></td>
+      <td>Renders memory, swap, disk and battery usage as progress bars.</td>
+    </tr>
     <tr>
       <td><code>github-stats</code></td>
       <td>Displays GitHub user statistics such as stars, repos, pull requests, and followers.</td>
     </tr>
+    <tr>
+      <td><code>langs</code></td>
+      <td>Shows the languages of a GitHub repository or aggregates a user/org with brand colors.</td>
+    </tr>
     <tr>
       <td><code>display-resolution</code></td>
       <td>Displays monitor resolution and refresh rate.</td>

docs/compatibility.md

@@ -22,6 +22,11 @@
       <td>✓</td><td>✓</td><td>✓</td>
       <td>Pure computation, no OS dependencies.</td>
     </tr>
+    <tr>
+      <td><code>banner</code></td>
+      <td>✓</td><td>✓</td><td>✓</td>
+      <td>Logo-animation plugin; pure computation, but needs a TTY and a CJK-capable font.</td>
+    </tr>
     <tr>
       <td><code>banner-text</code></td>
       <td>✓</td><td>✓</td><td>✓</td>
@@ -42,11 +47,21 @@
       <td>✓</td><td>✓</td><td>✓</td>
       <td>Requires the Docker CLI (Docker Desktop on Windows/macOS).</td>
     </tr>
+    <tr>
+      <td><code>gauges</code></td>
+      <td>✓</td><td>✓</td><td>✓</td>
+      <td>Memory, swap and disks via <code>sysinfo</code> on all platforms; battery lines are Linux-only.</td>
+    </tr>
     <tr>
       <td><code>github-stats</code></td>
       <td>✓</td><td>✓</td><td>✓</td>
       <td>Requires <code>curl</code> and network access.</td>
     </tr>
+    <tr>
+      <td><code>langs</code></td>
+      <td>✓</td><td>✓</td><td>✓</td>
+      <td>Requires <code>curl</code> and network access to the GitHub API; set <code>GITHUB_TOKEN</code>/<code>GH_TOKEN</code> for higher rate limits.</td>
+    </tr>
     <tr>
       <td><code>music-player</code></td>
       <td>✓</td><td>~</td><td>✗</td>