Features
- validate the expiry and security code too
- validate the card number against a zod schema
- copy a card's expiry and CVV from the row menu
Bug Fixes
- place the relayed picker in document, not viewport, coordinates
- host the picker in the top frame for hosted-fields checkouts
Documentation
- record the versions carrying the xm22 transport fix
- rewrite the GHSA-xm22 audit as a record, not a plan
Other
- test(autofill): cover nesting, scrolling and COEP for the relayed picker
- chore(deps): patch the nanoid zero-size loop advisory
- chore(deps): patch the js-yaml omap CPU advisory
- test(sync): bound flushUntil in real time so it survives a loaded machine
Full Changelog: 1.14.2-chromium...1.14.3-chromium