extension 4.1.17 → 4.1.18-canary.1789403792.e514b06c

package/README.md

@@ -8,8 +8,10 @@
 [discord-url]: https://discord.gg/v9h2RgeTSN
 [snyk-image]: https://snyk.io/test/github/extension-js/extension.js/badge.svg?color=0971fe
 [snyk-url]: https://snyk.io/test/github/extension-js/extension.js
+[scorecard-image]: https://api.scorecard.dev/projects/github.com/extension-js/extension.js/badge
+[scorecard-url]: https://scorecard.dev/viewer/?uri=github.com/extension-js/extension.js
 
-# Extension.js [![Version][npm-version-image]][npm-version-url] [![Stars][stars-image]][stars-url] [![CI][action-image]][action-url] [![Discord][discord-image]][discord-url] 
+# Extension.js [![Version][npm-version-image]][npm-version-url] [![Stars][stars-image]][stars-url] [![CI][action-image]][action-url] [![Discord][discord-image]][discord-url] [![OpenSSF Scorecard][scorecard-image]][scorecard-url]
 
 > The cross-browser extension framework. Build for Chrome, Edge, Firefox, and Safari with no build config required.
 
@@ -29,7 +31,7 @@ Works with `npm`, `pnpm`, `yarn`, `bun`, and `deno`.
 
 Browser extensions ship with the worst dev experience in modern web. Manifest V3 fragmentation, browser-specific quirks, no hot reload for content scripts, and a separate build pipeline for every target. Extension.js fixes that.
 
-- **Hot Module Replacement** for background, content, popup, and options scripts, including React, Vue, Svelte, and Preact components
+- **Hot Module Replacement** for popup, options, devtools and other extension pages, including React, Vue, Svelte, and Preact components, with targeted reloads for content scripts and the service worker so one save never reloads the whole extension
 - **Manifest V3 by default**, with automatic adapters for Chrome, Edge, Firefox, and Safari targets
 - **One CLI** for Chrome, Edge, Firefox, and any Chromium or Gecko binary
 - **Zero config**, no webpack, no rollup, no plugins to maintain
@@ -51,7 +53,7 @@ If you have used [Plasmo](https://www.plasmo.com), [WXT](https://wxt.dev), or [C
 | :--------- | :----------- |
 | Run any GitHub sample directly | `extension dev https://github.com/.../sample` |
 | Managed browser binaries | `extension install firefox` downloads an isolated build |
-| Cross-browser HMR for content scripts | Built in, no plugin glue |
+| Targeted content-script reload across browsers | Built in, only the changed entries re-inject, no plugin glue |
 | Production zip for the stores | `extension build --zip` |
 | Framework agnostic | [Vanilla](https://templates.extension.dev/javascript), [TS](https://templates.extension.dev/typescript), [React](https://templates.extension.dev/react), [Vue](https://templates.extension.dev/vue), [Svelte](https://templates.extension.dev/svelte), [Preact](https://templates.extension.dev/preact), no lock-in |
 | Custom Chromium and Gecko binaries | `--chromium-binary`, `--gecko-binary` |

package/dist/cli.cjs

@@ -8010,6 +8010,7 @@ Build options
 - ${messages_code('--zip')} ${messages_arg('[boolean]')}                 Create ZIP archive of built extension
 - ${messages_code('--zip-source')} ${messages_arg('[boolean]')}          Include source files in ZIP
 - ${messages_code('--zip-filename')} ${messages_arg('<name>')}           Custom ZIP filename
+- ${messages_code('--no-addon-lint')}                          Skip the addons.mozilla.org lint of Firefox builds (runs when addons-linter is installed)
 
 ${external_pintor_default().underline('Centralized logger (terminal output)')}
 - The manager extension embeds a centralized logger that streams events to the CLI.
@@ -9195,7 +9196,7 @@ Cross-browser compatibility
             return null;
         }
         function registerBuildCommand(program) {
-            program.command('build').arguments('[project-name]').usage('[path-to-remote-extension] [options]').description(commandDescriptions.build).option(`--browser <${BROWSER_TARGETS_HELP}>`, 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds a Safari app via Xcode (macOS only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `false`', parseOptionalBoolean).option('--no-polyfill', 'disable the cross-browser polyfill').option('--zip [boolean]', 'whether or not to compress the extension into a ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-source [boolean]', 'whether or not to include the source files in the ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-filename <string>', 'specify the name of the ZIP file. Defaults to the extension name and version').option('--silent [boolean]', 'suppress the build summary output. Defaults to `false`', parseOptionalBoolean).option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--mode <development|production|none>', 'bundler mode override (also sets NODE_ENV). Defaults to `production`').option('--open [boolean]', 'open the built Safari app after packaging (safari targets only). Defaults to `false`', parseOptionalBoolean).option('--app-name <name>', 'override the Safari app name (safari targets only). Defaults to the manifest `name`').option('--bundle-id <reverse.dns>', 'set a user-owned Safari bundle identifier (safari targets only). Defaults to a generated dev.extensionjs.* id').option('--development-team <id>', 'sign the Safari app with an Apple Developer team id (safari targets only). Without it the build is ad-hoc signed, which Safari treats as unsigned: the extension then needs Develop \u25b8 Allow Unsigned Extensions re-ticked on every launch. A signed build is listed and stays enabled across restarts').option('--macos-only [boolean]', 'generate a macOS-only Safari Xcode project (safari targets only). Pass `false` for a universal macOS + iOS project. Defaults to `true`', parseOptionalBoolean).option('--force-regenerate', 'regenerate the Safari Xcode project even when up to date (safari targets only)').option('--output <pretty|json>', 'result format. Use json for a schema-1 envelope on stdout').addOption(new external_commander_namespaceObject.Option('--debug', 'print maintainer diagnostics alongside normal output')).addOption(new external_commander_namespaceObject.Option('--author, --author-mode', 'deprecated alias for --debug').hideHelp()).action(async (pathOrRemoteUrl, { browser: cliBrowser, ...buildOptions })=>{
+            program.command('build').arguments('[project-name]').usage('[path-to-remote-extension] [options]').description(commandDescriptions.build).option(`--browser <${BROWSER_TARGETS_HELP}>`, 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds a Safari app via Xcode (macOS only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `false`', parseOptionalBoolean).option('--no-polyfill', 'disable the cross-browser polyfill').option('--zip [boolean]', 'whether or not to compress the extension into a ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-source [boolean]', 'whether or not to include the source files in the ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-filename <string>', 'specify the name of the ZIP file. Defaults to the extension name and version').option('--silent [boolean]', 'suppress the build summary output. Defaults to `false`', parseOptionalBoolean).option('--addon-lint [boolean]', 'check Firefox builds against addons.mozilla.org rules with addons-linter when it is installed. Findings print as warnings. Defaults to `true`', parseOptionalBoolean).option('--no-addon-lint', 'skip the addons.mozilla.org lint of Firefox builds').option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--mode <development|production|none>', 'bundler mode override (also sets NODE_ENV). Defaults to `production`').option('--open [boolean]', 'open the built Safari app after packaging (safari targets only). Defaults to `false`', parseOptionalBoolean).option('--app-name <name>', 'override the Safari app name (safari targets only). Defaults to the manifest `name`').option('--bundle-id <reverse.dns>', 'set a user-owned Safari bundle identifier (safari targets only). Defaults to a generated dev.extensionjs.* id').option('--development-team <id>', 'sign the Safari app with an Apple Developer team id (safari targets only). Without it the build is ad-hoc signed, which Safari treats as unsigned: the extension then needs Develop \u25b8 Allow Unsigned Extensions re-ticked on every launch. A signed build is listed and stays enabled across restarts').option('--macos-only [boolean]', 'generate a macOS-only Safari Xcode project (safari targets only). Pass `false` for a universal macOS + iOS project. Defaults to `true`', parseOptionalBoolean).option('--force-regenerate', 'regenerate the Safari Xcode project even when up to date (safari targets only)').option('--output <pretty|json>', 'result format. Use json for a schema-1 envelope on stdout').addOption(new external_commander_namespaceObject.Option('--debug', 'print maintainer diagnostics alongside normal output')).addOption(new external_commander_namespaceObject.Option('--author, --author-mode', 'deprecated alias for --debug').hideHelp()).action(async (pathOrRemoteUrl, { browser: cliBrowser, ...buildOptions })=>{
                 const browser = cliBrowser ?? await resolveConfigBrowser(pathOrRemoteUrl || process.cwd(), 'build') ?? 'chromium';
                 if (buildOptions.debug || buildOptions.author || buildOptions.authorMode) {
                     process.env.EXTENSION_DEBUG = '1';
@@ -9273,6 +9274,7 @@ Cross-browser compatibility
                         zipSource: buildOptions.zipSource,
                         zipFilename: buildOptions.zipFilename,
                         silent: buildOptions.silent,
+                        addonLint: buildOptions.addonLint,
                         install: buildOptions.install,
                         extensions: parseExtensionsList(buildOptions.extensions),
                         mode,

package/dist/extension/config-types.d.ts

@@ -89,6 +89,11 @@ export interface BuildCommandConfig {
     zipSource?: boolean;
     zipFilename?: string;
     silent?: boolean;
+    /**
+     * Run addons-linter over Firefox production builds and print its findings
+     * as warnings. Needs `addons-linter` installed. Defaults to `true`.
+     */
+    addonLint?: boolean;
     extensions?: CompanionExtensionsConfig;
     transpilePackages?: string[];
     perfBudgets?: PerfBudgetsConfig;

package/package.json

@@ -38,7 +38,7 @@
     "extension": "./bin/extension.cjs"
   },
   "name": "extension",
-  "version": "4.1.17",
+  "version": "4.1.18-canary.1789403792.e514b06c",
   "description": "The cross-browser extension framework. Build Chrome, Edge, Firefox, and Safari extensions with no build configuration.",
   "homepage": "https://extension.js.org/",
   "bugs": {
@@ -106,9 +106,9 @@
     "vivaldi-location2": "2.1.1",
     "waterfox-location": "2.1.1",
     "yandex-location": "2.1.1",
-    "extension-create": "4.1.17",
-    "extension-develop": "4.1.17",
-    "extension-install": "4.1.17",
+    "extension-create": "4.1.18-canary.1789403792.e514b06c",
+    "extension-develop": "4.1.18-canary.1789403792.e514b06c",
+    "extension-install": "4.1.18-canary.1789403792.e514b06c",
     "commander": "^15.0.0",
     "pintor": "0.3.0",
     "semver": "^7.7.3",