chore(release): 1.2.21

主要修复
─────────
- fix(windows): TSF DLL 静态链接 CRT，防 host 进程（QQ 等）私有
  MSVCP140 劫持导致切微软拼音崩溃 0xc0000005（PR #287 + #289 + Codex
  P1 review）。
- fix(windows): 移除 DisableThreadLibraryCalls — /MT 下 CRT 需要
  thread attach/detach 通知做 per-thread TLS 清理，禁用反而触发崩溃。
- fix(recording): 录音条出现时 mic 已 capture，按 Option 不再吞开头
  字。emit Recording 加 race 检查避免短按时覆盖 stop/cancel UI 信号。
- fix(startup): splash 透明背景 + 卡片化，避免长启动时左半白屏。
- fix(vault): keyring chunks 用稳定 account name —— macOS Keychain
  Always-Allow 不再因 UUID 轮换失效；不再每次 load 都尝试删 9 个
  legacy entries 触发 ACL 弹窗（与 PR #277 一起）。

新功能
─────────
- feat(security): 凭据从 plaintext JSON 迁移到平台 credential vault
  （macOS Keychain / Windows Credential Manager / Linux libsecret）。
  Windows 2560 byte 限制下用 chunked storage；partial-write safe。
  legacy 多源迁移完成后自动清理（PR #277）。

工程
─────────
- chore(ci): 暂时搁置 macos-13（Intel mac）matrix —— GH Actions
  runner pool 紧张到每次 dispatch queue 1-2h（已观测 4 次）。Apple
  Silicon 用户 dmg 仍发；Intel mac 用户保留 v1.2.20 dmg + Rosetta
  说明（issue #299）。
- chore(devex): CI 加 macOS 矩阵 + 5-way 版本号一致性校验 +
  scripts/bump-version.sh 一行同步 5 处版本号。.gitignore 加
  promo-openless-v2 / node_modules / dist / target 全局兜底（PR #294）。
- docs: docs/audit-2026-05-06.md 工程审计基线，覆盖架构 / UI bug /
  多端一致性 / IPC 1:1 校验 / P0/P1/P2 改进路径。
- chore: 9 个改进 issue (#295-#303) 跟踪 audit 列出的所有 P1/P2/P3
  问题。

openless-all/app/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "openless-app",
-  "version": "1.2.20",
+  "version": "1.2.21",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "openless-app",
-      "version": "1.2.20",
+      "version": "1.2.21",
       "dependencies": {
         "@tauri-apps/api": "^2.1.1",
         "@tauri-apps/plugin-autostart": "^2.5.1",

openless-all/app/package.json

@@ -1,7 +1,7 @@
 {
   "name": "openless-app",
   "private": true,
-  "version": "1.2.20",
+  "version": "1.2.21",
   "type": "module",
   "scripts": {
     "dev": "vite",

openless-all/app/src-tauri/Cargo.lock

@@ -3562,7 +3562,7 @@ dependencies = [
 
 [[package]]
 name = "openless"
-version = "1.2.20"
+version = "1.2.21"
 dependencies = [
  "anyhow",
  "arboard",

openless-all/app/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "openless"
-version = "1.2.20"
+version = "1.2.21"
 description = "OpenLess — local voice input that types where your cursor is"
 authors = ["OpenLess"]
 edition = "2021"

openless-all/app/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "OpenLess",
-  "version": "1.2.20",
+  "version": "1.2.21",
   "identifier": "com.openless.app",
   "build": {
     "beforeDevCommand": "npm run dev",