v1.0.3 – OAuth Sign-In & Security Hardening

v1.0.3 – 2026-03-14

Features 🚀

• Added GitHub OAuth device flow — sign in with your GitHub account instead of pasting tokens (#22)

Security 🔐

• Auth sessions are now encrypted before hitting local storage, and sign-in guards block stale credentials (#23)
• Tighter token validation — bad or expired tokens get caught earlier (#20)
• Onboarding HTML is sanitized before rendering to close an injection vector (#17)

Accessibility ♿

• Settings tabs now support full keyboard navigation with proper ARIA labels (#19)

Infrastructure ⚙️

• Chrome Web Store publishing runs automatically through CI (#10)
• Bumped actions/checkout from v5 to v6 (#12)

Developer Experience 🛠️

• Expanded test coverage and added stricter threshold checks (#21)

Docs & Dependencies 📦

• Cleaned up README, metadata, and project docs (#18)
• Updated minor/patch dev dependencies (#16)