Releases · DoctorLai/SteemTools

Summary

Finishes the Cloudflare Worker API migration (and fixes a bug it introduced), then
hardens and modernises the project: a versioned popup footer, a dark mode, PR
coverage comments, a self-updating JavaScript-percentage badge, expanded tests and
refreshed docs. Bumps the extension to v1.1.0.

Type of change

Bug fix (non-breaking change that fixes an issue)
New feature (non-breaking change that adds functionality)
Documentation update
Chore / tooling

Bug fixes (API migration review)

Resteems content script returned 404. The new API dropped the /api path
prefix. Verified with curl that …/steemit/simple-reblog → 404 while
…/api/steemit/simple-reblog → 200, and restored the prefix in
js/content.js.
Stale default server. js/steemtools.js still defaulted to helloacm.com
(now 301) although the server dropdown was reduced to the Worker; setting the
dropdown to a missing option would silently break requests. Updated
default_server to api.justyy.workers.dev.
Repointed two hard-coded display links (witness “View Complete Data” → steemyy.com,
signing-key echo → the Worker) and fixed .github/FUNDING.yml formatting that was
failing prettier --check.

New features

Version in the UI. A footer shows Version: v1.1.0 · <date> (<commit>),
sourced from a generated js/version.js (scripts/gen-version.js, npm run gen:version) via a tested formatVersion helper. Regenerated on each build.
Dark mode. Follows prefers-color-scheme; links are yellow for contrast,
with sensible dark table styling.
PR coverage comments. .github/workflows/coverage.yml posts a Jest coverage
summary on every pull request and enforces the thresholds in jest.config.js.
Dynamic JavaScript-% badge. .github/workflows/language-badge.yml +
scripts/lang-badge.js compute the percentage from the GitHub API and publish a
shields.io endpoint badge to a dedicated orphan badges branch (main is
protected); the README points at it.

Chore / tooling / docs

Namespaced localStorage keys with a steemtools: prefix and automatically
migrates the v1.0 active-tab preference.
Bumped manifest.json, package.json and package-lock.json to 1.1.0;
added a regression test that keeps their version/Node metadata in sync.
Added SUPPORT.md; updated README.md, CHANGELOG.md, PRIVACY.md (repointed to
the Worker) and CONTRIBUTING.md.

Security review

Encodes and HTML-escapes API-provided account ids and witness metadata before
rendering them.
Restricts API-provided witness links to HTTP(S), adds noopener noreferrer to
links opened in a new tab, and URL-encodes query parameters.
Uses parsed hostname matching so lookalike domains such as
steemit.com.evil.example cannot trigger the content script.
Makes the language-badge API pipeline fail closed instead of publishing a bogus
0.0% badge when GitHub's API fails.

Tests

New/expanded unit tests for version/storage metadata, legacy storage migration,
escaped URLs, safe external links, supported-domain matching and the
language-badge helpers.
74 tests pass; coverage 100% statements/functions/lines, 91.95% branches.

Checklist

I ran npm run check and it passes.
I added or updated tests where relevant.
I did not modify vendored third-party libraries in js/.
I updated the documentation where relevant.

Notes for reviewers / maintainer

The badges branch and the JS-% badge are created automatically on the first
language-badge workflow run (main is never written to).
No commits are pushed by this PR to the protected branch beyond the normal merge.

Screenshots

The popup shows the build version in the footer:

Version: v1.1.0 · 2026-07-14 (<commit>)

What's Changed

1.0.0 locales and fix description len by @doctorlai-msrc in #19
Remove nodejs 18 by @doctorlai-msrc in #20
Update funding sources in FUNDING.yml by @doctorlai-msrc in #21
Update FUNDING.yml by @doctorlai-msrc in #22
1.1.0: Bug Fixes and Major refactoring by @doctorlai-msrc in #23
Update ver by @doctorlai-msrc in #24

Full Changelog: v1.0.0...v1.1.0

What's Changed

Steem Tools 1.0.0 — tooling, tests, CI/CD, docs & professionalization by @doctorlai-msrc in #6

chore(deps): bump globals from 15.15.0 to 17.7.0 by @dependabot[bot] in #14

chore(ci): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #9

chore(ci): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #7

chore(ci): bump actions/setup-node from 4 to 6 by @dependabot[bot] in #10

chore(deps): bump jest-environment-jsdom from 29.7.0 to 30.4.1 by @dependabot[bot] in #11

chore(ci): bump actions/checkout from 4 to 7 by @dependabot[bot] in #8

chore(deps): bump eslint from 9.39.4 to 10.6.0 by @dependabot[bot] in #13

chore(deps): bump @eslint/js from 9.39.4 to 10.0.1 by @dependabot[bot] in #12

chore(deps): bump jest from 29.7.0 to 30.4.2 by @dependabot[bot] in #16

chore(deps): bump archiver from 7.0.1 to 8.0.0 by @dependabot[bot] in #15

chore(doc) by @doctorlai-msrc in #17

Fix test by @doctorlai-msrc in #18