@the-portland-company/shell 0.10.0 → 0.10.2

package/CHANGELOG.md

@@ -1,3 +1,24 @@
+## 0.10.2 — 2026-07-13
+
+### Security (XSS) + UI
+
+- **Sanitize host-supplied hrefs** in native NavLink / footer / action links
+  (`safeHref` blocks `javascript:`/`data:` URL schemes) — merged from the
+  skills-scan security review. `npm audit` added to prepublish.
+- **Smaller OrgPill badge** (`28px` → `20px`) — carried forward from 0.10.1.
+
+  This is a single publish combining the XSS fix (was on `main` @ 0.10.0) and the
+  OrgPill change (was on `feat/orgpill-smaller-badge` @ 0.10.1).
+
+## 0.10.1 — 2026-07-13
+
+### Changed (OrgPill)
+
+- **Sidebar org switcher badge is smaller** (`28px` → `20px`) so the initials/logo
+  circle no longer nearly fills the `sm` MenuButton — gives visible top/bottom
+  breathing room. Only the icon size changed; the pill's colors/background and the
+  dropdown are untouched (light/dark styling unchanged).
+
 ## 0.10.0 — 2026-07-12
 
 ### Fixed (Specs brand colors)

package/dist/index.cjs

@@ -2058,7 +2058,7 @@ function OrgPill() {
                 name: currentOrg?.name,
                 logoUrl: currentOrg?.logoUrl,
                 brandColor: selectedOrgBrandColor,
-                size: "28px"
+                size: "20px"
               }
             ),
             /* @__PURE__ */ jsxRuntime.jsx(react.Text, { overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap", children: currentOrg?.name || "No organizations" })