@ai-matrx/design-system 0.44.3 → 0.44.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +8 -1
  2. package/package.json +2 -2
package/CHANGELOG.md CHANGED
@@ -1,5 +1,13 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.44.4 (2026-09-26 — secure SheetJS release)
4
+
5
+ * **Security:** replaced the stale npm-registry SheetJS 0.18.5 dependency with the official
6
+ SheetJS 0.20.3 release. This removes the prototype-pollution and ReDoS advisories from XLSX
7
+ export and content-transfer workbook generation.
8
+
9
+ **Consumer action:** none.
10
+
3
11
  ## 0.44.3 (2026-09-26 — nothing inside a context-menu region is restyled)
4
12
 
5
13
  * **Fix:** 0.44.2 stopped sizing the context REGION, but the trigger's icon rules were descendant
@@ -2898,4 +2906,3 @@ New dependencies: `@radix-ui/react-dialog`, `@radix-ui/react-popover`,
2898
2906
 
2899
2907
  - Added Button, Badge, Label, Separator, and `cn` as the first shared semantic UI foundation.
2900
2908
  - Added strict TypeScript, SSR-focused tests, package linting, declaration analysis, and isolated tarball import verification.
2901
-
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ai-matrx/design-system",
3
- "version": "0.44.3",
3
+ "version": "0.44.4",
4
4
  "description": "AI Matrx semantic React primitives shared across Vite, Next.js, desktop, and customer-built applications.",
5
5
  "type": "module",
6
6
  "license": "MIT",
@@ -412,7 +412,7 @@
412
412
  "react-resizable-panels": "^4.13.2",
413
413
  "tailwind-merge": "^3.7.0",
414
414
  "vaul": "^1.1.2",
415
- "xlsx": "^0.18.5",
415
+ "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",
416
416
  "zod": "^4.6.5",
417
417
  "@ai-matrx/kit": "latest"
418
418
  },