@absolutejs/absolute 0.20.0-beta.138 → 0.20.0-beta.139

package/CHANGELOG.md

@@ -6,6 +6,13 @@ This file is generated by `absolute-changelog` from the entries in
 `changelog/`. Edit an entry, not this file — and add new ones under
 `changelog/unreleased/`.
 
+## 0.20.0-beta.139 — 2026-10-16
+
+### Changed
+
+- **Web applications no longer install Expo, React Native or the Expo code-signing tooling; `absolute mobile` installs them for Expo apps** (`generateAbsoluteExpoCodeSigning`)
+  Every AbsoluteJS application used to install Expo and React Native, because the framework depended on `@absolutejs/devices-expo` (which needs both as peers) and on `@expo/code-signing-certificates`. A web application never runs either, but it carried them, and with them packages a vulnerability scan flags with no fixed release (node-forge through the signing certificates, braces through Metro). Both are now optional peer dependencies. `absolute mobile` installs `@absolutejs/devices` and `@absolutejs/devices-expo` into an Expo application the first time it needs them, the way it already installs Capacitor, and `absolute mobile update signing generate` installs `@expo/code-signing-certificates` as a development dependency. The framework no longer bundles node-forge into its CLI. Calling `generateAbsoluteExpoCodeSigning` directly now needs `@expo/code-signing-certificates` installed in the application, and says so if it is not.
+
 ## 0.20.0-beta.138 — 2026-10-16
 
 ### Changed

package/changelog.json

@@ -2,6 +2,20 @@
 	"contract": 1,
 	"name": "@absolutejs/absolute",
 	"releases": [
+		{
+			"changes": [
+				{
+					"detail": "Every AbsoluteJS application used to install Expo and React Native, because the framework depended on `@absolutejs/devices-expo` (which needs both as peers) and on `@expo/code-signing-certificates`. A web application never runs either, but it carried them, and with them packages a vulnerability scan flags with no fixed release (node-forge through the signing certificates, braces through Metro). Both are now optional peer dependencies. `absolute mobile` installs `@absolutejs/devices` and `@absolutejs/devices-expo` into an Expo application the first time it needs them, the way it already installs Capacitor, and `absolute mobile update signing generate` installs `@expo/code-signing-certificates` as a development dependency. The framework no longer bundles node-forge into its CLI. Calling `generateAbsoluteExpoCodeSigning` directly now needs `@expo/code-signing-certificates` installed in the application, and says so if it is not.",
+					"kind": "changed",
+					"summary": "Web applications no longer install Expo, React Native or the Expo code-signing tooling; `absolute mobile` installs them for Expo apps",
+					"symbols": [
+						"generateAbsoluteExpoCodeSigning"
+					]
+				}
+			],
+			"date": "2026-10-16",
+			"version": "0.20.0-beta.139"
+		},
 		{
 			"changes": [
 				{

package/dist/angular/components/core/streamingSlotRegistrar.js

@@ -1,5 +1,5 @@
 // @bun
-// .angular-partial-tmp-KtqefO/src/core/streamingSlotRegistrar.ts
+// .angular-partial-tmp-cVJTxm/src/core/streamingSlotRegistrar.ts
 var STREAMING_SLOT_REGISTRAR_KEY = Symbol.for("absolutejs.streamingSlotRegistrar");
 var STREAMING_SLOT_WARNING_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotWarningController");
 var STREAMING_SLOT_COLLECTION_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotCollectionController");

package/dist/angular/components/core/streamingSlotRegistry.js

@@ -1,5 +1,5 @@
 // @bun
-// .angular-partial-tmp-KtqefO/src/core/streamingSlotRegistrar.ts
+// .angular-partial-tmp-cVJTxm/src/core/streamingSlotRegistrar.ts
 var STREAMING_SLOT_REGISTRAR_KEY = Symbol.for("absolutejs.streamingSlotRegistrar");
 var STREAMING_SLOT_WARNING_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotWarningController");
 var STREAMING_SLOT_COLLECTION_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotCollectionController");
@@ -46,7 +46,7 @@ var warnMissingStreamingSlotCollector = (primitiveName) => {
   getWarningController()?.maybeWarn(primitiveName);
 };
 
-// .angular-partial-tmp-KtqefO/src/core/streamingSlotRegistry.ts
+// .angular-partial-tmp-cVJTxm/src/core/streamingSlotRegistry.ts
 var STREAMING_SLOT_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotAsyncLocalStorage");
 var isObjectRecord2 = (value) => Boolean(value) && typeof value === "object";
 var isAsyncLocalStorage = (value) => isObjectRecord2(value) && ("getStore" in value) && typeof value.getStore === "function" && ("run" in value) && typeof value.run === "function";

package/dist/build.js

@@ -13345,13 +13345,19 @@ var DEVICES_PACKAGE = "@absolutejs/devices", ABSOLUTE_MOBILE_SHELL_DEVICE_CAPABI
       ...new Set(plan.capabilities.flatMap((name) => plan.providers[name]?.native?.ios?.usageDescriptions ?? []))
     ].sort()
   };
+}, resolveAdapterManifest = (adapter, provider) => {
+  try {
+    return fileURLToPath2(import.meta.resolve(`${adapter}/package.json`));
+  } catch {
+    throw new TypeError(`${adapter} is not installed. Run \`absolute mobile init\` to install the ${provider === "expo" ? "Expo" : "Capacitor"} device adapters.`);
+  }
 }, loadAbsoluteDeviceCapabilityProviders = (projectRoot, provider = "capacitor") => {
   const adapter = ADAPTERS[provider];
   let path = join27(resolve22(projectRoot), "node_modules", adapter, "package.json");
   try {
     readFileSync15(path, "utf8");
   } catch {
-    path = fileURLToPath2(import.meta.resolve(`${adapter}/package.json`));
+    path = resolveAdapterManifest(adapter, provider);
   }
   const manifest = readJson(path);
   const { absolutejs } = manifest;
@@ -37619,5 +37625,5 @@ export {
   devBuild
 };
 
-//# debugId=B64A00E25D5E4C2464756E2164756E21
+//# debugId=2A99D03636D2BB0864756E2164756E21
 //# sourceMappingURL=build.js.map