snappy-prerender 2.6.0 → 2.8.0

package/CHANGELOG.md

@@ -6,6 +6,106 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and
 uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html). Earlier history predates
 the release tags; see the Git history for those changes.
 
+## [2.8.0] - 2026-10-31
+
+### Added
+
+- `freezeTime`, `timezone` and `randomSeed` make `Date`/`Date.now()` and optional
+  `Math.random()` deterministic across render and verification. `SOURCE_DATE_EPOCH` is
+  honoured, and pages can read `window.__SNAPPY_NOW__` / `window.__SNAPPY_NOW_ISO__`.
+- `hydration.allowRerender` and `hydration.skip`, plus `routeOverrides[].hydration`, let
+  explicitly dynamic routes re-render without being reported as failures.
+- `locales` adds path or single locale modes with automatic `<html lang>`, canonical,
+  `og:locale`, `og:locale:alternate`, self/alternate/`x-default` hreflang, sitemap
+  alternates, translated route maps and hreflang audit rules.
+- `seoLocale` seeds a cookie or `localStorage` locale before render and verification, and
+  optionally writes a pre-app bootstrap into the output. It supports localStorage, cookie
+  or both, `overwrite`, `navigator`, `forceHtmlLang`, route scoping, CSP hash and strict
+  externalization.
+- CLI flags for the clock, hydration policies, simple locale matrices and SEO locale.
+- Report fields for the fixed clock, locale counts, per-route locale, hydration policy,
+  allowed re-renders, ignored hydration errors and generated locale scripts.
+- `Head` accepts `tags` for arbitrary `script`, `style`, `noscript` and `base` elements,
+  with attribute objects, text, trusted `noscript` HTML and explicit keys.
+- `Head` accepts `htmlAttributes`, `bodyAttributes` and `titleAttributes`, restoring the
+  document's original attributes when no Head wants them.
+- `Head` accepts `defaultTitle`, multiple `images` and multiple `alternateLocales`; repeated
+  same-name `extra` metas can opt into duplicates. These replace the client-side surface of
+  React Helmet and React Helmet Async.
+- `Head` accepts `onChangeClientState` for observing added, removed and changed entries
+  after real DOM updates.
+- React 19 native `<meta>` and `<link>` tags are adopted and updated instead of
+  duplicated. A correct native `<title>` is left to React so navigation can remove it, while
+  older template titles are removed.
+- The head entry documents `HeadProps`, `HeadTag`, `HeadAttributes` and `HeadChange` with
+  JSDoc types; the package remains plain JavaScript and adds no TypeScript files.
+
+### Changed
+
+- Final HTML processing uses one parsed document for preload injection, CSP hashes,
+  page metadata and preload resources instead of reparsing after each step.
+- Render and verification use fewer Playwright round trips.
+- Route writes, audit link checks, destination copies and sitemap-index fetches run with
+  bounded concurrency; route reports are merged in deterministic order.
+- Preload hints are sorted, so repeated builds do not reorder modulepreload links.
+- Inline stylesheet text and critical CSS processor state are cached within a run.
+- Relative route-source loading and browser/server startup overlap where safe.
+- The JSON report includes phase timings, and `npm run benchmark` measures large sites.
+- `reuseVerificationContext` optionally reuses one browser context per verification worker.
+- A not-found page's generated noindex replaces an existing robots directive instead of
+  adding a second meta tag.
+
+## [2.7.0] - 2026-10-29
+
+### Added
+
+- Site audit for route health, links, metadata, sitemap and CSP. Findings are report-only
+  unless `failOnAuditError` is set; `auditIgnoreLinks` excludes dynamic links.
+- `reportPath` / `--report` writes a versioned JSON report with per-route records, audit,
+  verification, sitemap, preload manifest, truncation and traces.
+- `routesFile` and `routesFromSitemap` seed routes from text, JSON or a sitemap. Sitemap
+  indexes are followed one level, and relative paths resolve against the config file.
+- Deterministic BFS crawling when `maxRoutes` or `routePriority` is set.
+  `truncated.droppedRoutes` lists the routes that did not fit.
+- `routeOverrides` for per-route timeout, wait, readiness, crawl and storage state.
+- `transformHtml`, sync or async, runs before preload and CSP injection.
+- Framework detection for React, Vue, Svelte and Preact, with framework-specific hydration
+  messages and `firstMismatch` details.
+- `preloadLinks` for runtime chunks, fonts and the LCP image.
+- Sitemap hreflang alternates, image entries and `sitemap.locs` in the report.
+- Head JSON-LD, `lang`/`dir` and hreflang alternates.
+- App-declared 404 pages via `<meta name="prerender-status-code" content="404">`.
+- `csp: 'hash'` adds a meta policy with SHA-256 hashes for inline scripts and styles.
+- `retries`, `retryDelay` and `traceOnError` for failed renders.
+- `init` migration for a legacy `reactSnap` block.
+- CLI flags and documentation for the new options.
+
+### Changed
+
+- Verification reports the detected framework and uses its hydration message patterns.
+- SVG `<title>` elements are no longer counted as page titles.
+- Page metadata, audit findings and sitemap entries use the final HTML after transform and
+  preload injection.
+- Route sources resolve relative paths against the config file. Sitemap base and origin
+  handling is stricter.
+- The JSON report includes the verification summary, uses crawl acceptance order for
+  `order`, and redacts credentials, query strings and the storage-state path.
+
+### Fixed
+
+- A configured `notFoundRoute` may return HTTP 404 and is still written as `404.html`;
+  verification accepts that status for the same route.
+- An explicit `framework` selects its hydration message patterns during verification.
+- A non-string `transformHtml` result fails that route with a clear error.
+- `routeOverrides` ignores undefined values instead of clearing base settings.
+- `audit.linksChecked` counts every link pair considered, and route-health findings are
+  included in the audit.
+- `preloadLinks` does not preload scripts removed by `removeScriptTags` or `transformHtml`.
+- CSP hash mode warns when the generated policy blocks a browser request.
+- `init` normalises a single-string `reactSnap.include`.
+- The image sitemap collects `srcset` and `<picture><source>` candidates.
+- New no-op option combinations produce configuration warnings.
+
 ## [2.6.0] - 2026-10-27
 
 ### Added