cross-tab-worker-databus 0.20.6 → 0.20.8

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 本项目遵循 [Semantic Versioning](https://semver.org/)；变更记录格式参考 [Keep a Changelog](https://keepachangelog.com/)。
 
+## [0.20.8] - 2026-09-02
+
+### Added
+
+- Release verification now retries npm tarball resolution to tolerate registry propagation after publication.
+- The release workflow always verifies the exact tagged package's ESM and CommonJS consumers after the publish-or-skip step.
+
+## [0.20.7] - 2026-09-02
+
+### Added
+
+- Added published-package consumer verification that downloads the npm version, then imports every public ESM and CommonJS entry point from a clean temporary consumer.
+- The verification can target `PUBLISHED_VERSION` explicitly, making release validation independent from the local checkout version.
+
 ## [0.20.6] - 2026-09-02
 
 ### Added

package/docs/release-checklist.md

@@ -18,3 +18,5 @@ Run `npm publish --access public` from the tagged checkout. A version already pr
 1. Verify the version appears in `npm view cross-tab-worker-databus versions --json`.
 2. Install the published tarball or version in a clean consumer and import the root plus every public subpath.
 3. Record the result in the release notes. Do not advance to `1.0.0` until the public API and protocol deprecation policy are explicitly frozen.
+
+Run `PUBLISHED_VERSION=0.20.8 pnpm verify:published` after npm publication. The verifier retries while the registry propagates the tarball; tune `PUBLISHED_VERIFY_ATTEMPTS` and `PUBLISHED_VERIFY_DELAY_MS` only for unusually slow mirrors.

package/docs/roadmap.md

@@ -1,6 +1,16 @@
 # Roadmap
 
-0.20.6 is the current development line. The project is intentionally continuing through reliability-focused minor releases before a 1.0.0 stability freeze.
+0.20.8 is the current development line. The project is intentionally continuing through reliability-focused minor releases before a 1.0.0 stability freeze.
+
+## 0.20.8 delivered scope
+
+- Release verification retries npm tarball resolution during registry propagation and validates the exact tagged version after publish or skip.
+- GitHub Release now runs the same ESM/CJS published-consumer check used locally, including manually published releases.
+
+## 0.20.7 delivered scope
+
+- Added `pnpm verify:published` to download the npm package and verify root, hooks, Vue, and Centrifuge ESM/CJS consumers in a clean temporary directory.
+- Published verification accepts `PUBLISHED_VERSION` for release-specific checks and otherwise follows npm's current version.
 
 ## 0.20.6 delivered scope
 

package/docs/zh/release-checklist.md

@@ -18,3 +18,5 @@
 1. 用 `npm view cross-tab-worker-databus versions --json` 确认版本已出现。
 2. 在干净消费者中安装已发布版本或 tarball，并导入主入口及所有公开子路径。
 3. 将结果记录到发布说明。在公开 API 和协议弃用策略明确冻结前，不进入 `1.0.0`。
+
+npm 发布后运行 `PUBLISHED_VERSION=0.20.8 pnpm verify:published`。验证器会在 registry 传播 tarball 时自动重试；只有遇到异常慢的镜像才需要调整 `PUBLISHED_VERIFY_ATTEMPTS` 和 `PUBLISHED_VERIFY_DELAY_MS`。

package/docs/zh/roadmap.md

@@ -1,6 +1,16 @@
 # 路线图
 
-0.20.6 正在推进。项目会先持续完成可靠性与协议兼容性的中版本迭代，再进入 1.0.0 稳定性冻结。
+0.20.8 正在推进。项目会先持续完成可靠性与协议兼容性的中版本迭代，再进入 1.0.0 稳定性冻结。
+
+## 0.20.8 已完成范围
+
+- 发布后验证会在 npm registry 传播期间轮询 tarball，降低刚发布时的误报失败。
+- GitHub Release 在发布或跳过发布后，都会验证当前 tag 对应版本的 ESM/CJS 消费者；手动 npm 发布也适用。
+
+## 0.20.7 已完成范围
+
+- 新增 `pnpm verify:published`：从 npm 下载已发布包，并在干净临时消费者中验证主入口、hooks、Vue、Centrifuge 的 ESM/CJS 导入。
+- 支持通过 `PUBLISHED_VERSION` 指定版本；未指定时跟随 npm 当前版本。
 
 ## 0.20.6 已完成范围
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cross-tab-worker-databus",
-  "version": "0.20.6",
+  "version": "0.20.8",
   "description": "Framework-agnostic cross-tab data bus with Dedicated/Shared Worker clustering and Centrifuge support.",
   "type": "module",
   "license": "MIT",
@@ -78,6 +78,7 @@
     "bench": "vitest bench --run",
     "bench:browser": "pnpm build && node scripts/bench-browser.mjs",
     "verify:pack": "node scripts/verify-packed-consumer.mjs",
+    "verify:published": "node scripts/verify-published-consumer.mjs",
     "test:e2e": "pnpm build && playwright test",
     "typecheck": "tsc --noEmit",
     "prepublishOnly": "pnpm check"