0.3.0 → 1.2.0 (2026-03-01 → 2026-06-11) The extension lets contributors submit signals to Hybrid War Tracker from Chrome and Firefox. Across this range it was rebuilt from scratch (at 1.0.0) on the same WXT + TypeScript + React + Zod framework, ending as a focused, hardened, submission-only extension. Starting point (0.3.0): WXT-based extension for Chrome/Firefox on the new /v1/ submission API, with install_id tracking, anonymous submissions, and a first-install welcome page. Added / Improved

Signal vs. Library routing — submissions go to the right destination by content type.
Direct one-click submit with per-tab badge feedback and a Terms-of-Service gate.
Popular-tag suggestions from /v1/tags, comma-paste tag entry, and tag chips.
Redesigned popup, dedicated settings page, sticky save bar with an unsaved-changes guard.
Onboarding with pseudonym flow, ToS v3, and accurate privacy/AMO disclosures.
Notes field wired to user_annotations.notes.
Vitest unit tests added alongside Playwright E2E.

Changed

Rebuilt from scratch on the same WXT + TS + React + Zod stack (1.0.0) as a much smaller codebase.
Dependencies modernized: TypeScript 6, Zod 4, React 19 (from TS 5.7 / Zod 3).
Single-source version; per-build provenance tokens (getBuildMeta).
Terminology: "Queued" → "Submitted".

Removed

In-browser archive capture — MHTML/WACZ capture, full-page screenshots, the bulk-archive page, offline queue, and submission history. Archiving moved server-side.
The legacy needs_archive submission path.

Security & Hardening

CSP default-src lockdown, submit URL allowlist, credentials: omit on every fetch (no cookie leak).
Validated submit payloads and popular-tags responses; converged the install_id write race.
Consent captured before persistence; backend details hidden from user-facing errors.
CVE/Dependabot fixes (picomatch ReDoS, mermaid XSS, plus ongoing dependency patches).
Hardened install: pnpm --ignore-scripts, vendored pins, CI deploy gates.

Required data collection, according to the developer: