This release adds 1 notable feature for engineering teams evaluating rollout.
Published 5d
Productivity & Wikis
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
astro
cms
emdash
typescript
Affected surfaces
deps
Summary
AI summaryUpdates Patch Changes, Minor Changes, and https://github.com/emdash-cms/emdash/pull/2067 across a mixed release.
Full changelog
Minor Changes
- #2067
07c9f21Thanks @ascorbic! - Adds@emdash-cms/registry-verification: runtime-neutral primitives for verifying plugin registry release artifacts. Validates multihash checksums, fetches artifacts with size and redirect guards, checks canonical tarball and bundle structure, and verifies Sigstore build provenance. Runs on both Node and workerd.
Patch Changes
- Updated dependencies [
07c9f21,e52dea9,3f8b778,07c9f21]:- @emdash-cms/[email protected]
- @emdash-cms/[email protected]
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About emdash
All releases →Related context
Related tools
Earlier breaking changes
- v@emdash-cms/[email protected] Requires Cloudflare Workers sites to add Cron Trigger and update entry point for scheduled publishing.
- [email protected] Schema migration adds `locale` and `translation_group` columns to `_emdash_bylines`.
- [email protected] Byline hydration now strictly per-locale, suppressing cross‑locale fallback.
- v@emdash-cms/[email protected] Changes `_emdash_content_bylines.byline_id` to store translation_group instead of row id, enforcing strict per-locale credit hydration.
- v@emdash-cms/[email protected] Registry install handler fails closed on non-conforming aggregator release records.
Beta — feedback welcome: [email protected]