react-on-rails-rsc 19.3.1-rc.1 → 19.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +12 -15
  2. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -4,17 +4,7 @@ All notable changes to this package will be documented in this file.
4
4
 
5
5
  ## [Unreleased]
6
6
 
7
- ## [19.3.1-rc.1] - 2026-10-07
8
-
9
- ### Changed
10
-
11
- * License: `react-on-rails-rsc` is governed by The React on Rails Pro License 3.0 (based on trust, free for small organizations; replaces EULA 2.3).
12
-
13
- ### Fixed
14
- - Fixed CSS wrapper builds for client modules using configured proposal syntax by passing `parserPlugins` from both RSC plugins to the wrapper export scan. ([#240])
15
- - Fixed `react-on-rails-rsc/WebpackLoader` failing RSC bundle builds with `SyntaxError: Unexpected token '/' ... is not valid JSON` when a `"use server"` (or other stock-path directive) module ends with a `//# sourceMappingURL=` comment — the shape npm packages publish. The loader now routes the stock node-loader's requests instead of answering every one with the module's own source: a sourcemap request is always answered with a valid empty map (real `.map`/inline-map passthrough is deliberately not implemented — tracked in [#239]), and any other requested module URL (`export *` resolution) is served from the bundler's input filesystem. ([#236])
16
-
17
- ## [19.3.1-rc.0] - 2026-09-19
7
+ ## [19.3.1] - 2026-10-08
18
8
 
19
9
  ### Breaking Changes
20
10
  - Opened the React 19.3 Flight line by depending on stock `react-server-dom-webpack@~19.3.0` and raising the `react` and `react-dom` peer floors to `^19.3.0`. Published `19.3.0` remains the React 19.2.8 line; apps still on React 19.2.8 must pin exact `react-on-rails-rsc@19.3.0` instead of taking this patch. ([#235])
@@ -22,7 +12,14 @@ All notable changes to this package will be documented in this file.
22
12
  **Migration Guide:**
23
13
 
24
14
  1. Upgrade application `react`, `react-dom`, and `react-server-dom-webpack` together to 19.3.0 so the nested Flight runtime matches React and a second Flight copy is not installed.
25
- 2. Keep exact `react-on-rails-rsc@19.3.0` while the app remains on React 19.2.8. Do not treat `19.3.1-rc.0` as a drop-in patch for that line. This candidate publishes to npm `next` only; `latest` stays on `19.3.0` until the downstream gate accepts the final.
15
+ 2. Keep exact `react-on-rails-rsc@19.3.0` while the app remains on React 19.2.8. Do not treat `19.3.1` as a drop-in patch for that line: a caret or tilde range such as `^19.3.0` or `~19.3.0` now resolves to `19.3.1`, which requires React 19.3.0.
16
+
17
+ ### Changed
18
+ - License: `react-on-rails-rsc` is governed by The React on Rails Pro License 3.0 (based on trust, free for small organizations; replaces EULA 2.3). ([#237])
19
+
20
+ ### Fixed
21
+ - Fixed CSS wrapper builds for client modules using configured proposal syntax by passing `parserPlugins` from both RSC plugins to the wrapper export scan. ([#240])
22
+ - Fixed `react-on-rails-rsc/WebpackLoader` failing RSC bundle builds with `SyntaxError: Unexpected token '/' ... is not valid JSON` when a `"use server"` (or other stock-path directive) module ends with a `//# sourceMappingURL=` comment — the shape npm packages publish. The loader now routes the stock node-loader's requests instead of answering every one with the module's own source: a sourcemap request is always answered with a valid empty map (real `.map`/inline-map passthrough is deliberately not implemented — tracked in [#239]), and any other requested module URL (`export *` resolution) is served from the bundler's input filesystem. ([#236])
26
23
 
27
24
  ## [19.3.0] - 2026-09-16
28
25
 
@@ -107,9 +104,8 @@ All notable changes to this package will be documented in this file.
107
104
  ### Security
108
105
  - Updated the vendored `react-server-dom-webpack` runtime from React 19.0.3 to the React 19.0.7 security level, applying the React 19.0.4 fixes for CVE-2025-55183, CVE-2025-55184, and CVE-2025-67779 plus the React 19.0.7 reply-decoding denial-of-service fixes for CVE-2026-23869 (GHSA-479c-33wc-g2pg) and CVE-2026-23870 (GHSA-rv78-f8rc-xrxh). Note: the upstream CVE-2026-23869 fix changes the reply wire format for nested `FormData`, so client and server must both run the patched runtime shipped by this package. ([#48]) ([#86])
109
106
 
110
- [Unreleased]: https://github.com/shakacode/react_on_rails_rsc/compare/19.3.1-rc.1...HEAD
111
- [19.3.1-rc.1]: https://github.com/shakacode/react_on_rails_rsc/compare/19.3.1-rc.0...19.3.1-rc.1
112
- [19.3.1-rc.0]: https://github.com/shakacode/react_on_rails_rsc/compare/19.3.0...19.3.1-rc.0
107
+ [Unreleased]: https://github.com/shakacode/react_on_rails_rsc/compare/19.3.1...HEAD
108
+ [19.3.1]: https://github.com/shakacode/react_on_rails_rsc/compare/19.3.0...19.3.1
113
109
  [19.3.0]: https://github.com/shakacode/react_on_rails_rsc/compare/19.2.1...19.3.0
114
110
  [19.2.1]: https://github.com/shakacode/react_on_rails_rsc/compare/19.2.0...19.2.1
115
111
  [19.2.0]: https://github.com/shakacode/react_on_rails_rsc/compare/19.0.5...19.2.0
@@ -118,6 +114,7 @@ All notable changes to this package will be documented in this file.
118
114
  [#203]: https://github.com/shakacode/react_on_rails_rsc/pull/203
119
115
  [#235]: https://github.com/shakacode/react_on_rails_rsc/pull/235
120
116
  [#236]: https://github.com/shakacode/react_on_rails_rsc/pull/236
117
+ [#237]: https://github.com/shakacode/react_on_rails_rsc/pull/237
121
118
  [#239]: https://github.com/shakacode/react_on_rails_rsc/issues/239
122
119
  [#207]: https://github.com/shakacode/react_on_rails_rsc/pull/207
123
120
  [#120]: https://github.com/shakacode/react_on_rails_rsc/pull/120
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "react-on-rails-rsc",
3
- "version": "19.3.1-rc.1",
3
+ "version": "19.3.1",
4
4
  "description": "React Server Components support for react_on_rails Ruby gem",
5
5
  "exports": {
6
6
  "./client": {