sproutboat 0.11.2 → 0.11.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -10,6 +10,18 @@ maintained going forward by the `release` skill.
10
10
 
11
11
  ## [Unreleased]
12
12
 
13
+ ## [0.11.3] - 2026-09-14
14
+ ### Fixed
15
+ - Bumped `@sproutboat/runtime` to `^0.6.4`, picking up the encode-side half of
16
+ the same `O(n^2)` string-building bug `v0.11.2` fixed on the decode side.
17
+ `__sbToBytes` sits behind every `crypto.subtle` call a handler makes:
18
+ `digest`, `importKey`, `sign`, `verify` and the PBKDF2/scrypt path all funnel
19
+ their data, keys, salts and signatures through it, so hashing a request body
20
+ was quadratic in the body's size. `__sbHexOrBytes`, which decodes the
21
+ `expected` side of an HMAC verify, was worse still; it rewrote its
22
+ accumulator's last character on every odd nibble, copying the whole string
23
+ twice per byte (baronunread/sproutboat#180).
24
+
13
25
  ## [0.11.2] - 2026-09-14
14
26
  ### Fixed
15
27
  - Bumped `@sproutboat/runtime` to `^0.6.3`. `v0.11.1` bumped it to `^0.6.2`,
@@ -470,7 +482,8 @@ its own package.
470
482
  - Renamed the package to `sproutboat` (was `@sproutboat/cli`); dropped the
471
483
  `sprout` bin alias in favour of a user-defined shell alias.
472
484
 
473
- [Unreleased]: https://github.com/baronunread/sproutboat-cli/compare/v0.11.2...HEAD
485
+ [Unreleased]: https://github.com/baronunread/sproutboat-cli/compare/v0.11.3...HEAD
486
+ [0.11.3]: https://github.com/baronunread/sproutboat-cli/compare/v0.11.2...v0.11.3
474
487
  [0.11.2]: https://github.com/baronunread/sproutboat-cli/compare/v0.11.1...v0.11.2
475
488
  [0.11.1]: https://github.com/baronunread/sproutboat-cli/compare/v0.11.0...v0.11.1
476
489
  [0.11.0]: https://github.com/baronunread/sproutboat-cli/compare/v0.10.3...v0.11.0
package/SURFACE.md CHANGED
@@ -3,7 +3,7 @@
3
3
  > Generated by `src/surface.test.ts` from `src/surface.ts` + the pinned
4
4
  > toolchain constants. Do not edit by hand — run `UPDATE_SURFACE=1 bun test`.
5
5
 
6
- **Package:** `sproutboat` 0.11.2 · runs on Bun (use `bunx`, not `npx`)
6
+ **Package:** `sproutboat` 0.11.3 · runs on Bun (use `bunx`, not `npx`)
7
7
 
8
8
  ## Commands
9
9
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sproutboat",
3
- "version": "0.11.2",
3
+ "version": "0.11.3",
4
4
  "description": "Wrangler-shaped CLI for Sproutboat. Deploys workers to any control plane via --api-url / SPROUTBOAT_API_URL.",
5
5
  "keywords": [
6
6
  "cli",
@@ -64,7 +64,7 @@
64
64
  "@sproutboat/artifact": "^0.2.0",
65
65
  "@sproutboat/assets": "^0.2.0",
66
66
  "@sproutboat/config": "^0.3.0",
67
- "@sproutboat/runtime": "^0.6.3",
67
+ "@sproutboat/runtime": "^0.6.4",
68
68
  "@sproutboat/toolchain": "^0.4.0",
69
69
  "@sproutboat/wire": "^0.5.0",
70
70
  "esbuild": "^0.28.2"
@@ -78,10 +78,10 @@
78
78
  "typescript": "7.0.2"
79
79
  },
80
80
  "optionalDependencies": {
81
- "@sproutboat/cli-darwin-arm64": "0.11.2",
82
- "@sproutboat/cli-darwin-x64": "0.11.2",
83
- "@sproutboat/cli-linux-arm64": "0.11.2",
84
- "@sproutboat/cli-linux-x64": "0.11.2"
81
+ "@sproutboat/cli-darwin-arm64": "0.11.3",
82
+ "@sproutboat/cli-darwin-x64": "0.11.3",
83
+ "@sproutboat/cli-linux-arm64": "0.11.3",
84
+ "@sproutboat/cli-linux-x64": "0.11.3"
85
85
  },
86
86
  "engines": {
87
87
  "node": ">=18"