@ai-matrx/records 0.58.22 → 0.58.24
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -2
- package/dist/core/index.cjs +34075 -89
- package/dist/core/index.cjs.map +1 -1
- package/dist/core/index.js +34072 -76
- package/dist/core/index.js.map +1 -1
- package/dist/index.cjs +34017 -28
- package/dist/index.cjs.map +1 -1
- package/dist/index.js +34021 -15
- package/dist/index.js.map +1 -1
- package/dist/react/index.cjs +34050 -64
- package/dist/react/index.cjs.map +1 -1
- package/dist/react/index.js +34047 -51
- package/dist/react/index.js.map +1 -1
- package/dist/use-cases/index.cjs +7 -2
- package/dist/use-cases/index.cjs.map +1 -1
- package/dist/use-cases/index.js +7 -2
- package/dist/use-cases/index.js.map +1 -1
- package/package.json +3 -5
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,17 @@
|
|
|
1
1
|
# Changelog — @ai-matrx/records
|
|
2
2
|
|
|
3
|
+
## 0.58.24 (2026-09-26 — consumer-safe SheetJS packaging)
|
|
4
|
+
|
|
5
|
+
* **Packaging:** SheetJS 0.20.3 is now compiled into the package instead of appearing as a remote
|
|
6
|
+
tarball dependency. npm's consumer security policy rejects remote dependencies; installs are
|
|
7
|
+
now registry-only and retain the maintained SheetJS release. No consumer action.
|
|
8
|
+
|
|
9
|
+
## 0.58.23 (2026-09-26 — secure SheetJS release)
|
|
10
|
+
|
|
11
|
+
* **Security:** replaced the stale npm-registry SheetJS 0.18.5 dependency with the official
|
|
12
|
+
SheetJS 0.20.3 release. This removes the prototype-pollution and ReDoS advisories from both
|
|
13
|
+
untrusted workbook import and XLSX export. No consumer action.
|
|
14
|
+
|
|
3
15
|
## 0.58.22 (2026-09-26 — lane data-tables-grid-overhaul)
|
|
4
16
|
|
|
5
17
|
* **`useTable` re-reads on the table's shape nudge** (`tableShapeChanged`, or the realtime port's
|
|
@@ -2020,5 +2032,3 @@ Two defects the suite found in the mirror and fixed:
|
|
|
2020
2032
|
`custom.value_versions` overwrite all four with the truth BEFORE
|
|
2021
2033
|
`custom.value_envelope_refusal` looks. Those four predictions are gone —
|
|
2022
2034
|
a sentence the store never says is a defect in the mirror.
|
|
2023
|
-
|
|
2024
|
-
|