Recent Changes

General

Support userscript editing at vscode.dev if the Tampermonkey Editors extension is installed

Allow cloud backups to be downloaded

Fix the active script count when an embedded frame is removed

Fix automatic detection mode of the option 'Add GM functions to this or window'

Fix disappearing 'Yes' value of the 'Modify existing content security policy headers' option

Fix GM.download(url, name)

Fix GM_setValue with binary content

Fix sometimes broken userscript link in stack trace

Fix menu command listeners sometimes being executed multiple times

Fix GM_deleteValue to really delete values also in background

Make the storage editor show undefined values as well

Fix issues after document.write was called

Internal cleanup and rework for manifest v3

Improve visualization of blacklisted scripts

ESLint updated to 8.32.0

Chrome

Fix active script count not being reset on tab reloads

Introducing Tam, your helpful assistant for getting started

Show more site icons per script

Search editor as you type

Assure editor search results are scrolled in view

Confirm script deletion in the dashboard if the trash is disabled

Sync

Make TamperDAV script change detection work regardless of boot order

When using WebDAV, add a trailing slash notation to collection names as suggested by the spec

Fix issues regarding enabling and disabling sync

Locales

Localize extension name and description

Update Italian translation | thanks to bovirus

Update Japanese translation | thanks to shirayuki

Update Chinese (simplified) translation | thanks to gin3715

Update Russian translation | thanks to Tyemak

Update Danish translation | thanks to jhertel

Experimental

Add experimental GM_info.userAgentData with all properties of NavigatorUAData and some "high entropy" values

If you encounter unreliable script injection after this update, then please check this FAQ entry.

General

Fix GM_unregisterMenuCommand

Fix GM.saveTab

Make @sandbox always default to raw

Make console methods enumerable again

Disable wrappedJSObject compatibility option by default

Internal rework and cleanup

Chrome

Avoid showing a warning message at many tabs

Sync

Fix an issue that script updates were disabled on sync triggered change imports

General

Experimental @sandbox support with possible values 'raw', 'JavaScript' and 'DOM'

'raw' access means that a script for compatibility reasons always needs to run in page context. At the moment this mode is the default if @sandbox is omitted.
'JavaScript' access mode means that this script needs unsafeWindow access. At Firefox a special context is created which should also bypass all remaining CSP issues. Execution in page context is used as fallback at other browsers.
'DOM' access mode means that the script only needs DOM and no direct unsafeWindow access. If enabled these scripts are executed inside the extension context or at any other enabled context otherwise.

Add an option to configure available sandbox modes
Warning: Any option that enables 'DOM' mode is potentially unsecure. Userscripts that run in extension context have almost full extension permissions and can even modify and install new userscripts.

Remove document.addEventListener('DOMContentLoaded', ...) delayed event dispatching for document-start scripts executed later than the event

Remove toSource object prototype compat option

Allow GM_xhr streams to be canceled

Add GM_xhr.upload.onprogress support

Add some more entries to the download file extension whitelist

Add GM_download.details.conflictAction (works only in browser API mode)

Fix @resource SVG handling

Add some more editor shortcuts

Remove GM_setTab in favor of the documented GM_saveTab call

Allow script tabs to be closed via middle mouse click

Add a close button to the header of some more dialogs

Fix script toggle element if darker theme is enabled

Locales

Add Macedonian translation | thanks to EntityPlantt

Add Hellenic (Greek) translation | thanks to panos78

Update Chinese (simplified) translation | thanks to iskandarma

Update Portuguese-Brazil translation | thanks to DavidBrazSan

Update Russian translation | thanks to vanja-san

Sync

Add an access token revoke button to some more cloud storage types
Note: make sure to sign out from the service first if you want to login with another account.

Show script sync log messages at the settings page

Dropbox: avoid upload of identical content