🚀 ytdl-material 1.1.3

Fixes clicks that did nothing in the library and player, moves the Chrome extension to Manifest V3, and patches security advisories in multer and qs.

🛠️ Fixes

• Library cards respond to clicks everywhere. The date strip and download spinner blocked parts of every card, and a background refresh could swallow a click. #435
• Playlist downloads can be cancelled. The progress spinner covered the Cancel button. #435
• Chrome extension updated to Manifest V3, which current Chrome requires. Firefox stays on V2. #428
• Fewer CSS warnings in the browser console. Bootstrap 4.0.0 → 5.3.8, no visual change. #444

🔒 Security / Dependencies

• multer 2.4.0 fixes GHSA-3pph-fpjx-jg34, a denial of service through aborted uploads. #444
• qs 6.16.0 fixes GHSA-4mjr-xmp4-gh2g (denial of service) and GHSA-x5fp-wj9c-mxmx (array-limit bypass). 87a02659
• The browser extension no longer bundles jQuery 3.4.1. #444
• Removed 17 of 18 dependency overrides and refreshed both lockfiles. Both trees audit clean. #430 #433 #434 #436 #439 #440 #441 #442 #443 #444

⚠️ Upgrading

• Firefox extension: new add-on ID, so Firefox treats it as a different extension. Remove the old one and install this release's package. #431
• docker-compose.yml now uses latest instead of nightly. Only matters if you copy it fresh.

Full Changelog: v1.1.2...v1.1.3

New Contributors

• @interbiznw made their first contribution in #428

Contributors

• @interbiznw
• @voc0der