Fixed
Editing a multi-action configuration could blank a selection and fail to save (#50) — when a configuration had more than one action, the "Mark as Reviewed/Unreviewed" (and "Follow/Unfollow") radio buttons could silently lose their selection, and then Update Configuration threw Cannot read properties of null (reading 'value'). The radios used hardcoded name/id attributes, so every action's radios shared one document-wide radio group and cleared each other. Each action now gets a unique radio-group name/id, and the save reads are null-guarded with a sensible default. Thanks to @sbrobeson for the precise repro that pinpointed the cause.
macOS Alt(Option) keyboard shortcuts did nothing (#49) — e.g. Alt+N to rotate buttons. On macOS, Option turns the keystroke into a special character, so event.key was no longer the letter the shortcut was matching against. Shortcuts now fall back to event.code (the physical key) when Alt is held.
Mojibake on the options page — the expand/collapse arrows on existing configuration items (and a few other glyphs) rendered as â–¼ because options.html had no <meta charset>, so the browser decoded options.js as Windows-1252 instead of UTF-8. Added <meta charset="UTF-8">.
Added
Firefox for Android support (#47) — added browser_specific_settings.gecko_android to the manifest so the extension can be installed on Firefox for Android.

~8× faster bulk actions. A 200-obs OF bulk dropped from ~4–5 minutes to ~33 seconds via parallel validation, prevention, and per-obs action loops, plus a v2 selective-fields prefetch and elimination of unused waits.
Downvote-existing-annotation action. New checkbox on the annotation action panel: downvote the matching existing annotation instead of trying to add a new one. Useful for cleanup workflows.
URLgen state persistence. All your URL-builder settings (quality grade, reviewed, licenses, bbox, custom lists, action boxes) now actually persist across sessions. Previously only action boxes did.
URLgen default state is now all three quality grades + reviewed=any (was just research-grade + reviewed=no).
Bug fixes: 429 cascade on addAnnotation, silent undo-record loss past 10 MB, v2 prefetch subfield gap, dead-code cleanup.
Fixed
Project dropdown surfaces common-word projects (#48) — lookupProject now queries iNaturalist's relevance-ranked /projects/autocomplete endpoint instead of the general /projects search sorted by observation_count (which came back null, so the sort was meaningless and buried matches past per_page). Typing "blue" now finds the project Blue!.
Added
Manual project ID entry (#48) — the Project ID field is no longer read-only. Typing an ID resolves it via the new lookupProjectById helper and auto-fills the project name (inline success/error feedback), as an escape hatch for any project the dropdown still can't surface.

Patch release: remove third-party CDN dependency.

Discovered during the Chrome Web Store submission pass that URLgen.html loaded FontAwesome from cdnjs.cloudflare.com at runtime — meaning Cloudflare saw users' IPs every time the URL filter generator opened. This contradicted the privacy policy's claim of no third-party hosts beyond iNaturalist (and GitHub for explicit issue-reporter clicks).

Removed
The remote cdnjs.cloudflare.com stylesheet link from URLgen.html.
Changed
The two draw-control icons on the URL filter generator's map are now inline SVGs in URLgen.js, using currentColor so they inherit Leaflet's control styling. Zero additional payload; no font files; no remote loads.
Note on .fa-* references in content.js
Unchanged — those query iNaturalist's own page DOM (iNat already loads FontAwesome on its pages). We never needed to ship the library ourselves for those references.