From 72f324adaed95190a2219b4aabd979bd312e92bb Mon Sep 17 00:00:00 2001
From: moamen <mo@menbasel.com>
Date: Fri, 15 May 2026 01:27:53 +0300
Subject: [PATCH] v2.1.1: deferred globals scan + CSV LF + version label fix

See CHANGELOG.md for full notes. Tagged release will fire the
GH Actions release pipeline added in v2.1.0.
---
 CHANGELOG.md          | 4 +++-
 manifest.firefox.json | 2 +-
 manifest.json         | 2 +-
 3 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 40f7e97..f954f9e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,7 +2,7 @@
 
 All notable changes to KeyFinder are documented here. Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning follows [SemVer](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [2.1.1] - 2026-05-14
 
 ### Added
 - `SECURITY.md` with threat model, disclosure policy, and known limitations of the MAIN <-> ISOLATED nonce bridge
@@ -12,6 +12,8 @@ All notable changes to KeyFinder are documented here. Format follows [Keep a Cha
 ### Changed
 - CSV export sanitiser now also prefixes cells starting with LF (`\n`), not just `=`, `+`, `-`, `@`, tab, CR
 - Popup and results page version label is now read from the manifest at runtime instead of being hardcoded
+
+### Fixed
 - Window-global scan in `js/interceptor.js` now runs at `document_start`, `DOMContentLoaded`, and `load`, with per-name dedupe. The previous implementation only scanned at `document_start` when page globals had not yet been assigned, making the entire pass dead code on most real pages
 
 ## [2.1.0] - 2026-04-14
diff --git a/manifest.firefox.json b/manifest.firefox.json
index 8fdfb2b..6c9a309 100644
--- a/manifest.firefox.json
+++ b/manifest.firefox.json
@@ -1,7 +1,7 @@
 {
   "name": "KeyFinder",
   "description": "Passively discovers API keys, tokens, and secrets leaked in page scripts, DOM, network responses, and browser storage. Available for Chrome and Firefox.",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "manifest_version": 3,
   "browser_specific_settings": {
     "gecko": {
diff --git a/manifest.json b/manifest.json
index 76aca2e..cae3a56 100644
--- a/manifest.json
+++ b/manifest.json
@@ -1,7 +1,7 @@
 {
   "name": "KeyFinder",
   "description": "Passively discovers API keys, tokens, and secrets leaked in page scripts, DOM, network responses, and browser storage. Available for Chrome and Firefox.",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "manifest_version": 3,
   "action": {
     "default_icon": {