New permission needed after Chrome Web Store update despite no GitHub commits or releases

[Boxersteavee]

I got a notification in chrome this morning calling for "Action Required", and it's because BookmarkHub has been disabled by Chrome because it has a new permission I must agree to before using it, which is "Read and change your data on a number of websites". Now I get sometimes permissions can have multiple purposes and need to be required for some features, but what makes me very suspicious of this is that it's a NEW permission. The extension was updated on the play store today (25th March 2026), whilst the last release in the github repo was in December 2024, and the last commit was in January 2025...

Has something happened? I'm a bit worried about the safety of the extension now, so I won't enable it unless I know there's nothing wrong. If this is legitimate, why does it need this new permission?

[dudor]

@Boxersteavee
Don't worry, I promise it's as safe as before.
In the new version of Bookmarkhub, a cloud storage platform service has been integrated, allowing bookmark data to be uploaded to platforms like GitHub, Gitee, GitLab, OneDrive, and Google Drive. Without the necessary host permissions for these services, the extension cannot perform the upload.

Additionally, apart from these explicitly requested host permissions, if you are using WebDAV or S3 storage services and have configured a custom host address in the software's settings page, you will need to manually request the corresponding host permissions.

Domain Explanations
https://.memoload.com/
Reason: This is the server domain for the extension's own operations and backend APIs.

https://.github.com/
https://.githubusercontent.com/
Reason: These are the access domains for the GitHub API. The extension's core functionality supports using GitHub Gist or GitHub repositories as remote data storage, enabling the upload and synchronization of bookmark data (such as version history and creating new Gists).

https://.googleapis.com/
Reason: This is the official API domain for Google APIs. The extension supports syncing bookmarks to the user's Google Drive.

https://gitee.com/*
Reason: This is the API domain for Gitee. Its functionality is similar to that of GitHub.

https://gitlab.com/*
Reason: This is the domain for the GitLab platform. Its functionality is similar to that of GitHub.

https://.microsoft.com/
Reason: This permission is primarily used to support integration with Microsoft OneDrive storage. It allows users to log in with their Microsoft account and smoothly sync, back up, or restore bookmark data to their personal OneDrive cloud storage.

https://.sentry.io/
Reason: Sentry is an industry-standard frontend application exception monitoring and tracking platform. When the extension crashes, encounters execution errors, or experiences unexpected exceptions, the extension requires this permission to automatically report error logs to the Sentry console. This helps developers (i.e., you) diagnose and fix bugs, thereby improving the extension's stability. If you prefer not to use this feature, you can disable the anonymous data reporting function in the settings.

[Boxersteavee]

Ah thank you, that makes much more sense. This can be closed now.

[Ll-Years]

当前Chrome商店更新版本1.0.1是不再开源了吗？
另外Firefox版本有更新更新计划吗？