v1.0.3 – OAuth Sign-In & Security Hardening

v1.0.3 – 2026-03-14

Features 🚀

• Added GitHub OAuth device flow — sign in with your GitHub account instead of pasting tokens (#22)

Security 🔐

• Auth sessions are now encrypted before hitting local storage, and sign-in guards block stale credentials (#23)
• Tighter token validation — bad or expired tokens get caught earlier (#20)
• Onboarding HTML is sanitized before rendering to close an injection vector (#17)

Accessibility ♿

• Settings tabs now support full keyboard navigation with proper ARIA labels (#19)

Infrastructure ⚙️

• Chrome Web Store publishing runs automatically through CI (#10)
• Bumped actions/checkout from v5 to v6 (#12)

Developer Experience 🛠️

• Expanded test coverage and added stricter threshold checks (#21)

Docs & Dependencies 📦

• Cleaned up README, metadata, and project docs (#18)
• Updated minor/patch dev dependencies (#16)

v1.0.2

What's Changed

• Fix test failures and expand test coverage by @jonmartin721 in #8

New Contributors

• @jonmartin721 made their first contribution in #8

Full Changelog: v1.0.1...v1.0.2

v1.0.1

What's Changed

Fixed

• Fixed ESLint v9 flat config setup after upgrade (CI was broken due to missing @eslint/js dependency)
• Fixed manifest description length to comply with Chrome Web Store requirements (120 char limit)

Changed

• Updated ESLint from 8.57.1 to 9.39.1 with proper flat config support
• Updated Jest and jest-environment-jsdom to v30.2.0
• Updated @types/chrome to latest version
• Updated GitHub Actions dependencies (checkout, setup-node, gh-release)
• Cleaned up unused variables and imports across codebase
• Configured ESLint to ignore underscore-prefixed intentionally unused variables

Documentation

• Updated encryption algorithm documentation for clarity
• Refreshed popup and settings page screenshots

Full Changelog: v1.0.0...v1.0.1

What's Changed

• ci: bump actions/setup-node from 3 to 6 by @dependabot[bot] in #1
• ci: bump actions/checkout from 3 to 5 by @dependabot[bot] in #2
• ci: bump softprops/action-gh-release from 1 to 2 by @dependabot[bot] in #3
• deps(deps-dev): bump @types/chrome from 0.0.268 to 0.1.30 in the minor-and-patch group by @dependabot[bot] in #4
• deps(deps-dev): bump eslint from 8.57.1 to 9.39.1 by @dependabot[bot] in #5

New Contributors

• @dependabot[bot] made their first contribution in #1

Full Changelog: v1.0.0...v1.0.1

v1.0.0

Full Changelog: https://github.com/jonmartin721/devwatch-github/commits/v1.0.0