create-zoijs 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 All notable changes to `create-zoijs` are documented here.
 
+## 0.3.0 — 2026-10-12
+
+### Changed
+- **New apps use `@zoijs/core` 1.10.0.** Package templates depend on `^1.10.0` and the `minimal`
+  template loads core 1.10.0 from jsDelivr with an integrity hash for every module file
+  (`core-cdn.json`, regenerated from the published tarball). 1.10.0 fixes SVG/MathML lists,
+  style bindings under a strict `style-src` CSP, `each()` item spread/`JSON.stringify`, multi-root
+  list items, and class bindings that wiped classes added by other code — see the core CHANGELOG.
+- **Scaffolded apps are editor-neutral.** The `app`, `basic`, `typescript` and `library`
+  templates no longer write `.vscode/extensions.json`, which recommended three third-party
+  extensions. Zoijs doesn't recommend editors or editor extensions; autocomplete and
+  optional type-checking still come from the types every package ships, through the
+  `jsconfig.json` (`app`, `basic`) or `tsconfig.json` (`typescript`, `library`) that the
+  templates keep. Existing apps are unaffected — delete `.vscode/` if you don't want it.
+
 ## 0.2.0 — 2026-10-05
 
 ### Security

package/bin/create-zoijs.js

@@ -89,7 +89,7 @@ const isText = (file) => file === "_gitignore" || TEXT_EXT.has(path.extname(file
 
 // npm strips/renames files and dirs that start with a dot from a published package,
 // so templates ship them with a "_" prefix and we restore the dot name on copy.
-const RENAME = { _gitignore: ".gitignore", _vscode: ".vscode" };
+const RENAME = { _gitignore: ".gitignore" };
 
 function applyTokens(content, tokens) {
   return content.replace(/\{\{(APP_NAME|APP_TITLE|ZOIJS_CORE_VERSION|ZOIJS_CORE_CDN|ZOIJS_CORE_IMPORTMAP)\}\}/g, (_, key) => tokens[key]);

package/core-cdn.json

@@ -1,31 +1,31 @@
 {
   "prod": false,
   "imports": {
-    "@zoijs/core": "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/index.js"
+    "@zoijs/core": "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/index.js"
   },
   "integrity": {
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/core/boundary.js": "sha384-sgP+7Uk+gh1Gk39OqMxZEo9Mox6uM6upgCbk9n4HKa8L3LywliSiXjQPQrjj/OG/",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/core/brand.js": "sha384-SQKAavcGif93XT58P5unWneM/VMR1rPsGM/wF63kNN4YaR2RdK2mu2IwULo9VYix",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/core/each.js": "sha384-ple5ogdJi5exkzQbgaQ8jnLLOymkmnG8dG/B8L36QkDbmIOiuRL+IdNVNNLYh+3N",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/core/html.js": "sha384-5sS5ABTdRpfXmhwZuIyhqcSO7fCY1VFVlYcolWRfLsRVzytc9JnUkjfX2Adfy8WI",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/core/mount.js": "sha384-eAm8c9K1SY4j66NnZ4pc4exzlek7iG67di9hU5U9S3PnaZnElkqRGpzOy2z4Uz2h",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/core/renderer.js": "sha384-H2K6FI3+kv2iPxyLb8V9e9Ux4X95PcPQGYu/h7Gq9rk4brE1nLHKFvI4iG5vt7Uz",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/index.js": "sha384-dDKK+RVA9Pj7X7aJvv0zgepWNZQi9W20zZ1JgACZ4EbIQ9LjvLsss8gsQGiyvcRb",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/prod.js": "sha384-2Wg5h5XW9gULwwZPet1azoni63tKm9iTs9FrAoLV0vGUa77h5WPgqsG/F3TFPuBy",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/reactivity/computed.js": "sha384-nlAK86Jy1IR3yFSePE38l6cjZqcu5SdnYRVQxJh/+2YQL3WhTHdZ18yCKeKL4ffm",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/reactivity/core.js": "sha384-dBKT0ohkuylmZHrv0HAjRtTxrMNyo6FZTk8Fqf6LH+aAi3moXikSLGdlPaeZi5IV",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/reactivity/devtools.js": "sha384-KyEdZp4AcE9RdgocIKg0Q3NKTIyCUPnMi8LLPGrDDhRCJ55DA/JcqSZRFjoHHR5X",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/reactivity/effect.js": "sha384-EMCI2Kpw6k0EUn5QPC6tJLoON+nUgQ7L25AXgIrWLmhMCLKJq/jP+C6Bk/P6gGDY",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/reactivity/env.js": "sha384-41791FgWw6cq/pCRB6up+hZExngmUr1tAVxQG58SdvonImEcU6jK7g14jzZAPBFL",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/reactivity/owner.js": "sha384-r8/NbofI3PXPfKvjxBuhWcRZGMJQn+Ldbne0ghFkjELu6SjvpaWIHnxF8FuScUAp",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/reactivity/runtime.js": "sha384-5CQnBBrMFUfcq+ahlgE4DX/nG0ua+Bo0l70VtRkXVPWQyvGtXoSScup7FHsQqbA2",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/reactivity/state.js": "sha384-w2HVkiWmSdb8h7qqr4OViqHJrDqlD/oInr+5Lal+lSvXWu3SPuZv35WWDPsEOgUq",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/utils/dom.js": "sha384-XsdCmmxzHfpBmOdz1648tCRrAMMHbWKIzvm4Aj2VIEpWJDIIaKmihqEARvxN6d+2",
-    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.9.0/src/utils/security.js": "sha384-7UafFG7FtgE/ZSVl+gEOKHc7qewaF0V6hKLEqgI9yj9mGTxz62GTzkrUPfbOXOtT"
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/core/boundary.js": "sha384-sgP+7Uk+gh1Gk39OqMxZEo9Mox6uM6upgCbk9n4HKa8L3LywliSiXjQPQrjj/OG/",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/core/brand.js": "sha384-SQKAavcGif93XT58P5unWneM/VMR1rPsGM/wF63kNN4YaR2RdK2mu2IwULo9VYix",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/core/each.js": "sha384-ple5ogdJi5exkzQbgaQ8jnLLOymkmnG8dG/B8L36QkDbmIOiuRL+IdNVNNLYh+3N",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/core/html.js": "sha384-5sS5ABTdRpfXmhwZuIyhqcSO7fCY1VFVlYcolWRfLsRVzytc9JnUkjfX2Adfy8WI",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/core/mount.js": "sha384-ALL+/TvSuGMiaTpVshF9N+Y11C42/PSUPW7WHGsQlNNpDrqAB8zN2LmnYztgnWNT",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/core/renderer.js": "sha384-vPSoCsTpq874cABpp4izdLZRiT26fXql+VOQMhbT1087RnETORCAcMTIogVnvzpW",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/index.js": "sha384-dDKK+RVA9Pj7X7aJvv0zgepWNZQi9W20zZ1JgACZ4EbIQ9LjvLsss8gsQGiyvcRb",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/prod.js": "sha384-2Wg5h5XW9gULwwZPet1azoni63tKm9iTs9FrAoLV0vGUa77h5WPgqsG/F3TFPuBy",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/reactivity/computed.js": "sha384-nlAK86Jy1IR3yFSePE38l6cjZqcu5SdnYRVQxJh/+2YQL3WhTHdZ18yCKeKL4ffm",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/reactivity/core.js": "sha384-2/pjKxk/6bmPWV33/RYobky3OmTngk1kiv2QM/lehlz8Qx6sv2vjvMA7yvtC7H/M",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/reactivity/devtools.js": "sha384-KyEdZp4AcE9RdgocIKg0Q3NKTIyCUPnMi8LLPGrDDhRCJ55DA/JcqSZRFjoHHR5X",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/reactivity/effect.js": "sha384-EMCI2Kpw6k0EUn5QPC6tJLoON+nUgQ7L25AXgIrWLmhMCLKJq/jP+C6Bk/P6gGDY",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/reactivity/env.js": "sha384-41791FgWw6cq/pCRB6up+hZExngmUr1tAVxQG58SdvonImEcU6jK7g14jzZAPBFL",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/reactivity/owner.js": "sha384-r8/NbofI3PXPfKvjxBuhWcRZGMJQn+Ldbne0ghFkjELu6SjvpaWIHnxF8FuScUAp",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/reactivity/runtime.js": "sha384-5CQnBBrMFUfcq+ahlgE4DX/nG0ua+Bo0l70VtRkXVPWQyvGtXoSScup7FHsQqbA2",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/reactivity/state.js": "sha384-w2HVkiWmSdb8h7qqr4OViqHJrDqlD/oInr+5Lal+lSvXWu3SPuZv35WWDPsEOgUq",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/utils/dom.js": "sha384-OuaImF4uLjqgJaa3ys/aKXepfX34hafYkA5tPFNwLwYzRjK0NWRVXAC+SqUmhshs",
+    "https://cdn.jsdelivr.net/npm/@zoijs/core@1.10.0/src/utils/security.js": "sha384-7UafFG7FtgE/ZSVl+gEOKHc7qewaF0V6hKLEqgI9yj9mGTxz62GTzkrUPfbOXOtT"
   },
   "packages": {
     "@zoijs/core": {
-      "version": "1.9.0",
+      "version": "1.10.0",
       "entries": [
         "src/index.js",
         "src/prod.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-zoijs",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Create a new Zoijs app with one command. Plain HTML, CSS, and JavaScript — no build step.",
   "type": "module",
   "bin": {

package/templates/app/jsconfig.json

@@ -1,6 +1,6 @@
 {
-  // jsconfig.json — gives your editor IntelliSense (autocomplete, hover, go-to-
-  // definition) for Zoijs and the DOM, from the types every package ships. No build
+  // jsconfig.json — gives your editor autocomplete, hover docs and go-to-
+  // definition for Zoijs and the DOM, from the types every package ships. No build
   // step, no TypeScript migration. Flip "checkJs" to true to also TYPE-CHECK your
   // JavaScript against those types (or add `// @ts-check` to a single file).
   "compilerOptions": {

package/templates/basic/jsconfig.json

@@ -1,6 +1,6 @@
 {
-  // jsconfig.json — gives your editor IntelliSense (autocomplete, hover, go-to-
-  // definition) for Zoijs and the DOM, from the types every package ships. No build
+  // jsconfig.json — gives your editor autocomplete, hover docs and go-to-
+  // definition for Zoijs and the DOM, from the types every package ships. No build
   // step, no TypeScript migration. Flip "checkJs" to true to also TYPE-CHECK your
   // JavaScript against those types (or add `// @ts-check` to a single file).
   "compilerOptions": {

package/templates/app/_vscode/extensions.json

@@ -1,7 +0,0 @@
-{
-  "recommendations": [
-    "bierner.lit-html",
-    "dbaeumer.vscode-eslint",
-    "esbenp.prettier-vscode"
-  ]
-}

package/templates/basic/_vscode/extensions.json

@@ -1,7 +0,0 @@
-{
-  "recommendations": [
-    "bierner.lit-html",
-    "dbaeumer.vscode-eslint",
-    "esbenp.prettier-vscode"
-  ]
-}

package/templates/library/_vscode/extensions.json

@@ -1,7 +0,0 @@
-{
-  "recommendations": [
-    "bierner.lit-html",
-    "dbaeumer.vscode-eslint",
-    "esbenp.prettier-vscode"
-  ]
-}

package/templates/typescript/_vscode/extensions.json

@@ -1,7 +0,0 @@
-{
-  "recommendations": [
-    "bierner.lit-html",
-    "dbaeumer.vscode-eslint",
-    "esbenp.prettier-vscode"
-  ]
-}