@fabricorg/experience-react 0.2.0 → 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +11 -0
  2. package/package.json +2 -2
package/CHANGELOG.md CHANGED
@@ -1,5 +1,16 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.2.1
4
+
5
+ ### Patch Changes
6
+
7
+ - e41c1f5: The handle a pack component receives was frozen, but the `events` and `bindings` arrays inside it were the render plan's own, by reference. `Object.freeze` is shallow, and those arrays are what the session's least-privilege check reads, so a component could push an event onto the plan and then invoke it. They are now frozen copies.
8
+
9
+ The conformance suite certified that hole shut, so it is tightened in the same release. `least-privilege-at-render-edge` now requires the lists to be frozen and not the plan's arrays. `experience-prop-is-sealed` now attempts the smuggle and requires it to reach neither the handle nor the plan. `missing-component-is-visible` now also supplies a `missingComponent` and requires the adapter to use it, since the option was declared and never exercised. The subject's `createElement` type is widened to accept a host element type, which React's own `createElement` already satisfies. An adapter that passed 0.2.0 by handing out live plan arrays, or by ignoring the caller's fallback, will not pass 0.2.1.
10
+
11
+ - Updated dependencies [e41c1f5]
12
+ - @fabricorg/experience-runtime@0.4.1
13
+
3
14
  ## 0.2.0
4
15
 
5
16
  ### Minor Changes
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@fabricorg/experience-react",
3
- "version": "0.2.0",
3
+ "version": "0.2.1",
4
4
  "description": "React renderer adapter for scoped Fabric experience render plans.",
5
5
  "license": "MIT",
6
6
  "type": "module",
@@ -30,7 +30,7 @@
30
30
  "LICENSE"
31
31
  ],
32
32
  "dependencies": {
33
- "@fabricorg/experience-runtime": "^0.4.0"
33
+ "@fabricorg/experience-runtime": "^0.4.1"
34
34
  },
35
35
  "peerDependencies": {
36
36
  "react": "^18.3.0 || ^19.0.0"