v1.1.11

Added UserStyles.world provider health, last-good result cache, retry backoff, degraded popup status, and sanitized provider diagnostics for style CSS/update failures.

v1.1.10

• Frame-aware saved-style matching distinguishes top frames, child frame URLs, parent-referrer about:blank frames, and parent-referrer srcdoc frames.\n- Unrelated child frames no longer inherit top-page styles by default.\n- Added regression tests for top frame, matching iframe, non-matching iframe, about:blank, srcdoc, and blocked opaque-frame matching.

v1.1.9

• Saved styles and popup previews use browser-managed USER-origin CSS insertion when available.\n- Page-load injection keeps DOM style tags as a fallback for unsupported or restricted pages.\n- USER-origin replacement and stale-match removal now call chrome.scripting.removeCSS before applying updated CSS.

v1.1.8

• Moves saved-style storage behind an IndexedDB adapter with one-time migration from chrome.storage.local.styles.
• Keeps the legacy chrome-storage object as rollback source and falls back if IndexedDB is unavailable.
• Adds regression coverage for migration, write-through behavior, and fallback storage.

v1.1.7

• Adds Google Drive sync tombstones so deleted styles do not reappear during merges.
• Reports conflicting local and remote style edits with both modified times and the side kept.
• Migrates legacy raw Drive backups into the new versioned sync payload and adds regression coverage for delete/edit sync cases.

v1.1.6

• Adds shared StyleKit import schema validation and add/change/remove dry-run previews.
• Keeps JSON and Gist imports pending until the preview is applied.
• Rejects unsafe HTML/JSON content types for URL, @import, and UserStyles.world CSS imports.

v1.1.5

• Replaces broad web-accessible resource globs with exact content-script import allowlists.\n- Adds Chrome use_dynamic_url for web-accessible resources while keeping Firefox output compatible.\n- Adds regression coverage for manifest resource policy and Rollup-derived allowlist generation.

v1.1.4

• Restricts chrome.storage.local to trusted extension contexts.\n- Routes editor onboarding and Google Fonts cache through typed background messages.\n- Adds regression coverage for content-script storage boundaries.

v1.1.3

Reliability release: saves a timestamped local rollback snapshot before JSON imports, Gist imports, and Google Drive sync overwrites replace styles; adds a Sync tab restore action; rejects malformed style maps before import. Verified with npm audit --json (0 vulnerabilities), npm run lint, npm test (11 suites / 84 tests), npm run build, npm run build:firefox, artifact checks, and Chrome headless extension load smoke.

v1.1.2

Security hardening release: validates Monaco iframe postMessage origins, payload shapes, and expected window sources before editor updates; removes stale Monaco package export; adds guard tests. Verified with npm audit --json (0 vulnerabilities), npm run lint, npm test (9 suites / 80 tests), npm run build, npm run build:firefox, and Chrome headless extension load smoke.