@ai-matrx/records 0.58.22 → 0.58.23

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog — @ai-matrx/records
 
+## 0.58.23 (2026-09-26 — secure SheetJS release)
+
+* **Security:** replaced the stale npm-registry SheetJS 0.18.5 dependency with the official
+  SheetJS 0.20.3 release. This removes the prototype-pollution and ReDoS advisories from both
+  untrusted workbook import and XLSX export. No consumer action.
+
 ## 0.58.22 (2026-09-26 — lane data-tables-grid-overhaul)
 
 * **`useTable` re-reads on the table's shape nudge** (`tableShapeChanged`, or the realtime port's
@@ -2021,4 +2027,3 @@ Two defects the suite found in the mirror and fixed:
   `custom.value_envelope_refusal` looks. Those four predictions are gone —
   a sentence the store never says is a defect in the mirror.
 
-

package/dist/core/index.cjs

@@ -5,8 +5,13 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err2) => function __init() {
+  if (err2) throw err2[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err2 = [e], e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)