Chromium Extension 1.6.0

Features

• accept patch/minor/major bump keywords
• Monero first + Lightning/on-chain toggle on the BTC card
• add the Bitcoin (Lightning) donation card
• replace "Total entries" with source-code links
• wire the real Monero donation address
• Support / donations section (Bitcoin + Monero)
• "Last synced" timestamp in the Sync settings (extension + mobile)
• live-refresh target status on background writes
• keep-last-N retention control in the target form
• enable .bramble backup restore
• open a .bramble file from the "Open existing vault" screen
• rename the "Data" tab to "Backups"
• sort the generic "Other" tiles last
• single alphabetical provider grid
• drop the Google Drive tile; Dropbox is the only OAuth provider
• configure the Dropbox app key + add files.metadata.read scope
• OAuth one-click providers (Dropbox), Phase 2
• automatic scheduled backups in the background
• accept a full bucket URL and show target errors in full
• persist the active tab in route search params
• restore a .bramble backup (extension-only for now)
• wire manual backup end-to-end
• S3 + WebDAV storage clients and backup orchestrator
• cloud backup settings UI
• auto-publish to the Chrome Web Store on release chromium
• macOS "touch your YubiKey" banner before each age decrypt

Bug Fixes

• accept v2 uploadState SUCCEEDED (not v1.1 SUCCESS)
• upload verified CRX via the CWS REST API v2
• upload the signed .crx to CWS (Verified CRX Uploads)
• strip manifest key from the CWS package
• one YubiKey touch for chromium (decrypt both CWS secrets together)
• secretFromKeychain returns string | undefined, not null
• smaller BTC method toggle, placed below the QR
• pin donation copy buttons to the card bottom
• lay the donation cards in a row
• stop "Last synced" flickering between "now" and "N seconds ago"
• add a dot separator between the GitHub and Codeberg links
• format dates with the active app locale, not the browser default
• run the OAuth connect in the background service worker
• keep saved credentials when editing a provider
• browser passkey allow-list + fail-loud on declined create

Refactors

• use cn() for dynamic classNames
• validate OAuth token responses with zod
• extract the scheduled-run orchestration to core
• support multiple backup targets
• split sections into scrollable tabs

Documentation

• add Bitcoin donations (Lightning + on-chain), 3-col table
• cloud backups shipped (Dropbox + S3 + WebDAV)
• record the MEGA + Proton Drive evaluations (both deferred)
• Dropbox OAuth verified on Chromium + Firefox
• refresh roadmap to cloud backups + multiple vaults

Other

• build(chromium): pin the CWS public key for a stable unpacked ID
• chore: local nextcloud compose for backup testing
• ci(codeql): advanced setup so Swift gets scanned
• chore(ios): update App Store release notes for the Face ID + P2P hardening update

Full Changelog: 1.5.0-chromium...1.6.0-chromium