[COLOR dodgerblue][B]Version 2.2.09[/B][/COLOR]
- Tooling: Ruff `E722` (no bare `except`) and Cursor exception-handling rule — policy for new/touched code (DEBT-001 phase 0).
- Refactor: Replaced bare `except:` with `except Exception:` across `resources/lib` (735 sites, DEBT-001 phase 1).
- Reliability: `kodi_utils.log_exception()` on hot paths (rate-limited; no logging inside scrape/playback poll loops).
- Docs: Custom key tip and router allowlist now include `custom_key.browse_related`.
- Cleanup: Removed unused helpers, commented dead code, and commented logger imports (DEAD-001–005).
- Security: Addon updater validates ZIP paths before extract, uses staging + backup swap (installed addon kept until extract succeeds), and HTTP timeouts on update downloads.
- Security: Replaced `exec()` on Extras, Discover, and random-play UI actions with allowlisted `getattr` dispatch.
- Fixed: Renamed settings key typo `lists_cache_duraton` to `lists_cache_duration` (existing values migrate on settings sync).
- Security: OMDb and TinyURL API calls now use HTTPS (cleartext HTTP removed).