Version 1.3.3 — Post-Audit Hardening & Global Security:
- UX & Localization Duplicate Icon Fix: removed redundant stop icon in localized messages for the sandbox stop button across all 6 languages (FR, EN, DE, ES, PT, VI).
- P0 Multi-Provider Wizard Resolution: added full active configuration builder for Cloud (Groq, Mistral) and Local (Ollama, LM Studio) presets with complete endpoints, fixing API connection testing and sandbox transcription for non-Gemini engines.
- Audio Robustness & Anti-Debounce Locks: synchronous locks preventing double-trigger on mic test and sandbox recording, automatic track release on page unload (pagehide), and systematic audio buffer memory purging.
- Network Leak Prevention: removed ?key query parameter from Google Gemini REST endpoints (authentication strictly via x-goog-api-key header to prevent key leaks in proxy/server logs), and tightened SSRF protection on testProvider.
- WCAG 2.1 AA Accessibility: enhanced color contrast, dynamic screen reader announcements via role="status" and aria-live="polite", visible focus rings for keyboard navigation, and responsive narrow screen layout.

Version 1.3.2 — Ubuntu APT Pinning Security & Step-by-Step Tutorial Integration:
- Direct Link to Illustrated Tutorial: Step 1 of the onboarding wizard now includes a direct link to the comprehensive tutorial on mtfk.fr (How to install Thunderbird .deb on Ubuntu and unlock microphone dictation).
- Terminal Command Security with APT Pinning 1001: replaced the basic command with a full one-line command configuring /etc/apt/preferences.d/mozillateam-thunderbird with priority 1001, preventing Ubuntu from silently reverting to the Snap dummy package on future system updates.
- Profile Backup Guidance: clear guidance on migrating email profiles from ~/snap/thunderbird/common/.thunderbird/ to ~/.thunderbird/ to ensure zero risk of perceived data loss.
- Full Multilingual Parity (6 languages): full localization across all 6 supported locales (FR, EN, ES, DE, PT, VI).

Version 1.2.7 — Enhanced security, robust audio lifecycle, and WCAG 2.1 AA accessibility:
- Security & Key Isolation: migrated Gemini API key to standard x-goog-api-key HTTP header, enforced cross-domain STT/LLM key isolation to prevent cross-leakage, and applied anti-SSRF guards.
- Gemini Live Truncation Fix: added graceful STOPPING buffer state awaiting server turn completion (turnComplete/generationComplete) or silence window before disconnect.
- Audio Lifecycle & Robustness: thorough WebAudio tree teardown, late-resolving microphone stream cleanup, tab removal listener, and continuous KeepAlive pings during PAUSED state.
- Hybrid Keyboard Mode: Space (Pause/Resume) and Enter (Stop/Insert) automatically step back during active text typing (< 1.5s) to guarantee zero interference with manual writing.
- Screen Reader Accessibility (WCAG AA): dedicated live announcement regions (role="status", role="alert"), aria-hidden on voice timer to avoid mic feedback, visible focus rings, and prefers-reduced-motion support.
- Codebase Cleanup: removed obsolete orphaned files and upgraded voice bars animation to pure GPU composite (transform: scaleY).