Release v0.67.4 · PlasmoHQ/plasmo

🚨 SECURITY FIX

fix(parcel-core): only allow client-side env to be included by @louisgv in #493
- This fix properly implemented the private environment behavior mentioned in our documentation.
- Previously, private environment are still passed down into the bundler. Thus, if developer added process.env.SOMETHING to their popup.tsx, it would be included.
- This fix ensure that even if a dependency is malicious (trying to extract process.env.SECRET_SYSTEM_ENV for example), it will not be included in the bundle. Only PLASMO_PUBLIC_ namespaced env are allowed to be included in the bundle, together with plasmo's specific env.

feat: Indonesian README translation by @agungjk in #490
feat: Russian README translation by @qFamouse in #489
feat: Turkish README translation by @agmmnn in #497
fix(parcel-resolver-post): ts resolver for svelte and vue by @louisgv in #494
fix: loading indicator styles clashing with the commonly used 'hidden' class by @OndrejNepozitek in #502
fix(parcel-resolver): correctly resolve relative import by @louisgv closes #500
fix(parcel-runtime): check for all active tab to reload content script by @louisgv
fix(parcel-transformer-manifest): firefox bgsw handling by @louisgv in #506
feat(cli): pass down system env when parsing by @louisgv in #507

Full Changelog: v0.66.0...v0.67.4