From 9388efcb00410056b4e03953a6274825e807a15b Mon Sep 17 00:00:00 2001 From: Vivek Date: Fri, 31 Jul 2026 06:28:50 +0530 Subject: [PATCH] chore: release core 0.7.46, server 0.8.58, cli 0.10.50 Ships asset() (#1194), the opt-in helper that content-hashes a public/ asset url so a deploy that changes the file changes the url, and the framework serves it immutable for a year. Also raises packages/server's declared @webjsdev/core range from ^0.7.1 to ^0.7.46. dev.js imports setAssetUrlProvider statically and the generated app imports asset, while the old range was satisfied by every published core and none of them carried those exports, so npm could happily install a combination that dies at module load. The release PR is the only place this bump is legal, and it retires the stale range that context.js's setCspNonceProvider has been relying on publish order for since 0.7.1. --- changelog/cli/0.10.50.md | 23 +++++++++++++++++++++++ changelog/core/0.7.46.md | 26 ++++++++++++++++++++++++++ changelog/server/0.8.58.md | 20 ++++++++++++++++++++ package-lock.json | 8 ++++---- packages/cli/package.json | 2 +- packages/core/package.json | 2 +- packages/server/package.json | 4 ++-- 7 files changed, 77 insertions(+), 8 deletions(-) create mode 100644 changelog/cli/0.10.50.md create mode 100644 changelog/core/0.7.46.md create mode 100644 changelog/server/0.8.58.md diff --git a/changelog/cli/0.10.50.md b/changelog/cli/0.10.50.md new file mode 100644 index 000000000..82e433c18 --- /dev/null +++ b/changelog/cli/0.10.50.md @@ -0,0 +1,23 @@ +--- +package: "@webjsdev/cli" +version: 0.10.50 +date: 2026-07-31T00:58:50.412Z +commit_count: 3 +--- +## Features + +- **serve the UI gallery at webjs.dev/ui** ([#1126](https://github.com/webjsdev/webjs/pull/1126)) [`d9b2fe1d`](https://github.com/webjsdev/webjs/commit/d9b2fe1d) + * refactor(website): extract the docs shell into lib/docs-shell.ts + + The sidebar, mobile drawer, and .prose-docs typography move out of the + docs sub-layout into a shared shell so the component library at /ui +- **teach HTTP verbs and GET caching on the gallery server-actions card** ([#1152](https://github.com/webjsdev/webjs/pull/1152)) [`5b6b67c1`](https://github.com/webjsdev/webjs/commit/5b6b67c1) + * feat: teach HTTP verbs and GET caching on the server-actions card + + The full-stack gallery used `method = 'GET'` incidentally in two query + files and never showed `cache`, `tags`, or `invalidates` at all, so a +- **add asset() for content-hashed public urls** [`510c32c8`](https://github.com/webjsdev/webjs/commit/510c32c8) + * feat: add asset() for content-hashed public urls + + An app's own asset urls sat at stable paths, so a CDN kept serving the + previous bytes after a deploy. That caused two visible regressions on diff --git a/changelog/core/0.7.46.md b/changelog/core/0.7.46.md new file mode 100644 index 000000000..0365021e5 --- /dev/null +++ b/changelog/core/0.7.46.md @@ -0,0 +1,26 @@ +--- +package: "@webjsdev/core" +version: 0.7.46 +date: 2026-07-31T00:58:50.293Z +commit_count: 3 +--- +## Features + +- **add asset() for content-hashed public urls** [`510c32c8`](https://github.com/webjsdev/webjs/commit/510c32c8) + * feat: add asset() for content-hashed public urls + + An app's own asset urls sat at stable paths, so a CDN kept serving the + previous bytes after a deploy. That caused two visible regressions on + +## Fixes + +- **stop SSR instantiating a component named inside a comment** ([#1132](https://github.com/webjsdev/webjs/pull/1132)) [`973309af`](https://github.com/webjsdev/webjs/commit/973309af) + * fix(core): stop SSR instantiating a component named inside a comment + + The custom-element walk matched tags with a flat regex over assembled + markup, so a registered tag name written inside an HTML comment was +- **refuse a function in form action=, it leaked server action source** ([#1167](https://github.com/webjsdev/webjs/pull/1167)) [`86605c21`](https://github.com/webjsdev/webjs/commit/86605c21) + * fix: refuse a function in form action=, it leaked server source + + At SSR a `'use server'` import resolves to the REAL function (the RPC stub + exists only in the browser), and `action=` is an ordinary escaped attribute diff --git a/changelog/server/0.8.58.md b/changelog/server/0.8.58.md new file mode 100644 index 000000000..234d0cace --- /dev/null +++ b/changelog/server/0.8.58.md @@ -0,0 +1,20 @@ +--- +package: "@webjsdev/server" +version: 0.8.58 +date: 2026-07-31T00:58:50.353Z +commit_count: 2 +--- +## Features + +- **add asset() for content-hashed public urls** [`510c32c8`](https://github.com/webjsdev/webjs/commit/510c32c8) + * feat: add asset() for content-hashed public urls + + An app's own asset urls sat at stable paths, so a CDN kept serving the + previous bytes after a deploy. That caused two visible regressions on + +## Fixes + +- **a partial fragment is never shared-cacheable** ([#1141](https://github.com/webjsdev/webjs/pull/1141)) [`d9a21e8e`](https://github.com/webjsdev/webjs/commit/d9a21e8e) + * fix(server): a partial fragment is never shared-cacheable + + Closes #1140 diff --git a/package-lock.json b/package-lock.json index 9e2e3aa5d..381ada66e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6975,7 +6975,7 @@ }, "packages/cli": { "name": "@webjsdev/cli", - "version": "0.10.49", + "version": "0.10.50", "license": "MIT", "dependencies": { "@webjsdev/mcp": "^0.1.0", @@ -6991,7 +6991,7 @@ }, "packages/core": { "name": "@webjsdev/core", - "version": "0.7.45", + "version": "0.7.46", "license": "MIT", "devDependencies": { "esbuild": "^0.25.0" @@ -7040,10 +7040,10 @@ }, "packages/server": { "name": "@webjsdev/server", - "version": "0.8.57", + "version": "0.8.58", "license": "MIT", "dependencies": { - "@webjsdev/core": "^0.7.1", + "@webjsdev/core": "^0.7.46", "ws": "^8.20.0" }, "engines": { diff --git a/packages/cli/package.json b/packages/cli/package.json index 16b28de56..1670bfb58 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "@webjsdev/cli", - "version": "0.10.49", + "version": "0.10.50", "type": "module", "description": "webjs CLI - dev, start, create, db", "bin": { diff --git a/packages/core/package.json b/packages/core/package.json index d648ec858..51f317e0b 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -1,6 +1,6 @@ { "name": "@webjsdev/core", - "version": "0.7.45", + "version": "0.7.46", "type": "module", "description": "webjs core runtime - html/css tags, WebComponent base, isomorphic renderers", "types": "./index.d.ts", diff --git a/packages/server/package.json b/packages/server/package.json index 5a7e5c3f4..9a37e15a2 100644 --- a/packages/server/package.json +++ b/packages/server/package.json @@ -1,6 +1,6 @@ { "name": "@webjsdev/server", - "version": "0.8.57", + "version": "0.8.58", "type": "module", "description": "webjs dev/prod server: SSR, router, API, server actions, live reload", "main": "index.js", @@ -28,7 +28,7 @@ "README.md" ], "dependencies": { - "@webjsdev/core": "^0.7.1", + "@webjsdev/core": "^0.7.46", "ws": "^8.20.0" }, "publishConfig": {