v2.1.1 — display + observer fixes, DOMPurify 3.4.15

Fixed

• Chat messages with &, <, >, or quotes no longer show escaped entities (e.g. <3 as <3) in clusters, the AI summary, and topics.
• Observer no longer drops messages during burst inserts — fast chats are counted completely.

Changed

• Settings + sidebar fallback now guide users to update Chrome for built-in AI; removed the stale ~400MB download copy.
• Bumped bundled DOMPurify 3.3.1 → 3.4.15 (clears sanitizer advisories affecting <=3.3.1).

Added

• Stable DOM-anchored message ids (foundation for future moderation/deletion handling).
• minimum_chrome_version 114 (Side Panel floor).

Full notes: https://github.com/ChatSignal/chat-signal/blob/main/CHANGELOG.md

v2.1.0 — On-device AI + permission reduction

On-device AI migration + reduced permission/network footprint.

• AI backend → Chrome built-in AI (Gemini Nano); WebLLM/Qwen removed (no ~400MB download)
• MiniLM encoder bundled in the package (no runtime download)
• CSP tightened to connect-src 'self' — no external network connections
• Dropped unlimitedStorage (permissions now just sidePanel + storage)
• Prompt-injection hardening retained end to end
• Supply chain: pinned MiniLM + DOMPurify, committed lockfile, npm ci in packaging

Full notes: https://github.com/ChatSignal/chat-signal/blob/main/CHANGELOG.md