🚨 SECURITY FIX
- fix(parcel-core): only allow client-side env to be included by @louisgv in #493
- This fix properly implemented the private environment behavior mentioned in our documentation.
- Previously, private environment are still passed down into the bundler. Thus, if developer added
process.env.SOMETHINGto theirpopup.tsx, it would be included. - This fix ensure that even if a dependency is malicious (trying to extract
process.env.SECRET_SYSTEM_ENVfor example), it will not be included in the bundle. OnlyPLASMO_PUBLIC_namespaced env are allowed to be included in the bundle, together with plasmo's specific env.
✨ What's Changed
- feat: Indonesian README translation by @agungjk in #490
- feat: Russian README translation by @qFamouse in #489
- feat: Turkish README translation by @agmmnn in #497
- fix(parcel-resolver-post): ts resolver for svelte and vue by @louisgv in #494
- fix: loading indicator styles clashing with the commonly used 'hidden' class by @OndrejNepozitek in #502
- fix(parcel-resolver): correctly resolve relative import by @louisgv closes #500
- fix(parcel-runtime): check for all active tab to reload content script by @louisgv
- fix(parcel-transformer-manifest): firefox bgsw handling by @louisgv in #506
- feat(cli): pass down system env when parsing by @louisgv in #507
plasmohq/storage
- v1.3.0 - https://github.com/PlasmoHQ/storage/releases/tag/v1.3.0
- v1.2.0 - https://github.com/PlasmoHQ/storage/releases/tag/v1.2.0
🥷 New Contributors
- @agungjk made their first contribution in #490
- @qFamouse made their first contribution in #489
- @agmmnn made their first contribution in #497
- @OndrejNepozitek made their first contribution in #502
🤝 Sponsors
Full Changelog: v0.66.0...v0.67.4