v3.7.3-beta3

Beta pre-release. New opt-in preload_while_hidden option, plus a marker config-escaping hardening fix. Continues the 3.7.3 beta line — drop-in upgrade from 3.7.3-beta2, no config changes required.

Added

• preload_while_hidden option — keep fetching fresh radar and hazard-overlay data (wildfires, NWS alerts, wind) on their normal cadence while the card is hidden, instead of the default full pause. Fixes the "popup card reloads from scratch every time it opens" experience (e.g. inside a Bubble Card pop-up): the card resumes playback instantly from already-warm data instead of a multi-second reload. Animation and canvas rendering stay paused while hidden either way — only the underlying data stays fresh. Opt-in, since it means real network/bandwidth use while the card isn't visible.

preload_while_hidden: true

Fixed

• Marker color/icon config values are now HTML-escaped before rendering. A security audit of external-data rendering (NWS alerts, wildfires, lightning — all already consistently escaped) turned up one gap: markers: config's color and icon fields were interpolated unescaped into the marker's inline SVG/<ha-icon> HTML. Not externally reachable — it's the dashboard owner's own YAML — but a crafted value in a copy-pasted config could break out of the attribute. Closed with the same escapeHtml() helper already used everywhere else.

Full Changelog: v3.7.3-beta2...v3.7.3-beta3