@zixcel/dom-renderer 0.10.0 → 0.10.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -0
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -31,3 +31,7 @@ pnpm test
|
|
|
31
31
|
[Usage guide](docs/getting-started.md)
|
|
32
32
|
|
|
33
33
|
[Implementation and public interfaces](src) · [Verification cases](test) · [Contributing](CONTRIBUTING.md) · [Security reporting](SECURITY.md) · [License](LICENSE) · [Attribution notices](NOTICE)
|
|
34
|
+
|
|
35
|
+
## Release provenance
|
|
36
|
+
|
|
37
|
+
Starting with 0.10.1, releases use GitHub Actions OIDC trusted publishing from `zixcel/projection-runtime` (`publish-npm.yml`), without a stored npm publishing token. The workflow verifies reviewed archive hashes and requires npm provenance metadata. Check the published version on npm and verify registry signatures and provenance with `npm audit signatures` in an installed consumer project. Package runtime behavior and API contracts are unchanged by this release.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@zixcel/dom-renderer",
|
|
3
|
-
"version": "0.10.
|
|
3
|
+
"version": "0.10.1",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"description": "Trusted native DOM rendering of PP RenderPlans and Zixcel owner inputs",
|
|
@@ -21,7 +21,7 @@
|
|
|
21
21
|
"dependencies": {
|
|
22
22
|
"three": "0.186.0",
|
|
23
23
|
"@zixcel/interaction": "0.10.1",
|
|
24
|
-
"@zixcel/projection-client": "0.10.
|
|
24
|
+
"@zixcel/projection-client": "0.10.1"
|
|
25
25
|
},
|
|
26
26
|
"scripts": {
|
|
27
27
|
"test": "node --test test/*.test.mjs",
|