@zixcel/view-delivery 0.10.0 → 0.10.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -0
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -36,3 +36,7 @@ The host requires an explicit owner, title, wire contract and allowed outcome
|
|
|
36
36
|
owner list. Cookie and request-header names may be supplied by the product;
|
|
37
37
|
defaults are generic. The Hatter browser UI remains in the product repository.
|
|
38
38
|
This workspace owns only the host and delivery contracts.
|
|
39
|
+
|
|
40
|
+
## Release provenance
|
|
41
|
+
|
|
42
|
+
Starting with 0.10.1, releases use GitHub Actions OIDC trusted publishing from `zixcel/view-delivery` (`publish-npm.yml`), without a stored npm publishing token. The workflow verifies reviewed archive hashes and requires npm provenance metadata. Check the published version on npm and verify registry signatures and provenance with `npm audit signatures` in an installed consumer project. Package runtime behavior and API contracts are unchanged by this release.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@zixcel/view-delivery",
|
|
3
|
-
"version": "0.10.
|
|
3
|
+
"version": "0.10.1",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"description": "Bounded trusted document and asset delivery; existing Crowsi STATE transport only",
|
|
@@ -18,7 +18,7 @@
|
|
|
18
18
|
}
|
|
19
19
|
},
|
|
20
20
|
"dependencies": {
|
|
21
|
-
"@zixcel/view-delivery-contracts": "0.10.
|
|
21
|
+
"@zixcel/view-delivery-contracts": "0.10.1",
|
|
22
22
|
"@crowsi/transport-foundation": "0.10.0",
|
|
23
23
|
"@crowsi/browser-security": "0.10.0",
|
|
24
24
|
"ws": "8.21.2",
|