security updates for manifest v2