emdash

v@emdash-cms/[email protected] Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 6d Productivity & Wikis

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

astro cms emdash typescript

Affected surfaces

breaking_upgrade

Summary

AI summary

Internal API updates to @cloudflare/kumo 2.3 with no public breaking changes.

Type	Severity	Summary	CVE
Dependency	Medium	Bumps @cloudflare/kumo from 1.16 to 2.3. Bumps @cloudflare/kumo from 1.16 to 2.3. Source: llm_adapter@2026-05-28 Confidence: high	—
Refactor	Medium	Updates Collapsible usage to compound components (Root, DefaultTrigger, DefaultPanel). Updates Collapsible usage to compound components (Root, DefaultTrigger, DefaultPanel). Source: granite4.1:30b@2026-05-28-audit Confidence: low	—
Refactor	Medium	Renames ChartPalette.color() to ChartPalette.categorical(). Renames ChartPalette.color() to ChartPalette.categorical(). Source: granite4.1:30b@2026-05-28-audit Confidence: low	—
Other	Low	Modifies admin tests to check aria-label instead of title attribute on Button. Modifies admin tests to check aria-label instead of title attribute on Button. Source: granite4.1:30b@2026-05-28-audit Confidence: low	—

Full changelog

#1177 b9cc08e Thanks @ascorbic! - Bumps @cloudflare/kumo from 1.16 to 2.3. Two internal call sites picked up breaking API changes from Kumo 2.0: Collapsible is now a compound component (Collapsible.Root / .DefaultTrigger / .DefaultPanel instead of <Collapsible label=...>), used by the accordion block; and ChartPalette.color() was renamed to ChartPalette.categorical() in the chart block. No public API changes -- consumers see identical behaviour. Tests in @emdash-cms/admin that asserted on Button's native title attribute now read aria-label instead, because Kumo 2 wraps <Button title> in a Tooltip popup rather than setting the DOM attribute.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track emdash

Get notified when new releases ship.

About emdash

[email protected] Schema migration adds `locale` and `translation_group` columns to `_emdash_bylines`.
[email protected] Byline hydration now strictly per-locale, suppressing cross‑locale fallback.
v@emdash-cms/[email protected] Changes `_emdash_content_bylines.byline_id` to store translation_group instead of row id, enforcing strict per-locale credit hydration.
v@emdash-cms/[email protected] Registry install handler fails closed on non-conforming aggregator release records.
v@emdash-cms/[email protected] Menu and menu-item API responses now camelCase, breaking clients expecting snake_case keys.