@takazudo/zfb-md-wasm 2.15.1 → 2.16.0

package/README.md

@@ -742,6 +742,15 @@ permanent promises — re-measure against the version you actually install.
 The clean four-step production ceiling is 210 seconds; the selected #2447
 median was 155.015 s [153.496, 165.977].
 
+**Sizes are guarded; content digests are not.** The byte sizes above are held by
+`shipped-sizes.json` and asserted in CI, so they move only on a deliberate
+artifact change. SHA-256 digests are a different matter: every release stamps
+its own version string into each `.wasm` — the value `version()` returns — so
+all four digests change on **every** release, including a documentation-only
+patch whose compiled code is identical and whose byte sizes do not move at all.
+If you verify these artifacts by content digest rather than by semver, re-pin on
+every upgrade; never read "sizes unchanged" as "nothing to re-verify".
+
 Gating `swc_core` out of the highlight graph (#2449/#2450) was a
 **provability win, not a size win**. The #2447 SWC-retaining baseline was
 1,484,705 B raw and 767,009 B gzip-9; the #2450 result was 7,965 B smaller

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@takazudo/zfb-md-wasm",
-  "version": "2.15.1",
+  "version": "2.16.0",
   "private": false,
   "type": "module",
   "description": "zfb's md/mdx -> JS/HTML conversion pipeline compiled to WebAssembly, for browser-side dynamic conversion (CMS live preview with parity to zfb's production output).",