vanilla-jet 1.5.3 → 1.5.5

package/CHANGELOG.md

@@ -4,6 +4,23 @@ All notable project changes are documented in this file.
 
 The format follows a structure inspired by Keep a Changelog and semantic versioning.
 
+## [1.5.5] - 2026-06-28
+
+### Changed
+
+- **Fingerprinted assets are now cached immutably.** Static requests carrying a `?v=` (the
+  `?v=size-mtime` fingerprint from `dipper.versionedUrl`) are served `Cache-Control: public,
+  max-age=31536000, immutable`; non-versioned assets keep `no-cache, must-revalidate`. This eliminates
+  per-asset revalidation round-trips for clients without the service worker (notably native WebViews).
+
+## [1.5.4] - 2026-06-28
+
+### Fixed
+
+- Added missing static MIME types so self-hosted web fonts and icons serve correctly:
+  `woff`, `woff2`, `eot`, `ico`. Previously `.woff2`/`.woff` returned 404 (only `ttf` was mapped),
+  forcing font fallbacks and wasted requests.
+
 ## [1.5.3] - 2026-06-28
 
 ### Changed

package/framework/router.js

@@ -31,6 +31,10 @@ class Router {
       'svg': 'image/svg+xml',
       'ttf': 'application/x-font-ttf',
       'otf': 'application/x-font-opentype',
+      'woff': 'font/woff',
+      'woff2': 'font/woff2',
+      'eot': 'application/vnd.ms-fontobject',
+      'ico': 'image/x-icon',
       'pdf': 'application/pdf',
       'json': 'application/json'
     };
@@ -135,7 +139,10 @@ class Router {
               }
 
               let metadata = staticFile.metadata;
-              let staticHeaders = obj.buildStaticHeaders(extHeader, staticCandidates, staticFile.contentEncoding, metadata);
+              // Fingerprinted assets (requested with ?v=size-mtime) are safe to cache forever:
+              // any content change produces a new URL. Everything else keeps revalidation.
+              let isImmutable = Boolean(request.get('v'));
+              let staticHeaders = obj.buildStaticHeaders(extHeader, staticCandidates, staticFile.contentEncoding, metadata, isImmutable);
 
               if (obj.isNotModified(req, metadata)) {
                 let notModifiedHeaders = Object.assign({}, staticHeaders);
@@ -276,7 +283,7 @@ class Router {
     return `${route}|${normalizedEncodings}`;
   }
 
-  buildStaticHeaders(extHeader, candidates, contentEncoding, metadata) {
+  buildStaticHeaders(extHeader, candidates, contentEncoding, metadata, isImmutable) {
     let staticHeaders = Object.assign({}, extHeader);
     if (contentEncoding) {
       staticHeaders['Content-Encoding'] = contentEncoding;
@@ -288,8 +295,15 @@ class Router {
     staticHeaders['Content-Length'] = metadata.size;
     staticHeaders['ETag'] = metadata.etag;
     staticHeaders['Last-Modified'] = metadata.lastModified;
-    // Force revalidation to keep clients fresh without hard reload.
-    staticHeaders['Cache-Control'] = 'no-cache, must-revalidate';
+    if (isImmutable) {
+      // Fingerprinted URL (?v=): cache for a year and skip revalidation entirely.
+      // This is the big win for clients without the service worker (e.g. native WebViews),
+      // which otherwise revalidate every asset on every load.
+      staticHeaders['Cache-Control'] = 'public, max-age=31536000, immutable';
+    } else {
+      // Non-versioned assets: force revalidation to keep clients fresh without a hard reload.
+      staticHeaders['Cache-Control'] = 'no-cache, must-revalidate';
+    }
     return staticHeaders;
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vanilla-jet",
-  "version": "1.5.3",
+  "version": "1.5.5",
   "description": "VannilaJet framework",
   "main": "index.js",
   "bin": {

package/test/router.test.js

@@ -48,6 +48,14 @@ test('isProtectedFile: blocks framework/external/node_modules and top-level file
   assert.equal(router.isProtectedFile('/public/scripts/vanilla.min.js'), false);
 });
 
+test('mimes: serves common web fonts and icons', () => {
+  const router = makeRouter();
+  assert.equal(router.mimes['woff2'], 'font/woff2');
+  assert.equal(router.mimes['woff'], 'font/woff');
+  assert.ok(router.mimes['eot']);
+  assert.ok(router.mimes['ico']);
+});
+
 test('supportsEncoding: honors q-values and array shape', () => {
   const router = makeRouter();
   assert.equal(router.supportsEncoding(['gzip'], 'gzip'), true);

package/test/server.test.js

@@ -78,6 +78,17 @@ test('static asset is served with caching validators', async () => {
   assert.ok(res.headers.get('last-modified'), 'Last-Modified should be present');
 });
 
+test('fingerprinted (?v=) asset is cached immutable; plain asset revalidates', async () => {
+  const versioned = await fetch(`${baseUrl}/public/scripts/test.min.js?v=123-456`);
+  await versioned.arrayBuffer();
+  assert.equal(versioned.status, 200);
+  assert.match(versioned.headers.get('cache-control') || '', /immutable/);
+
+  const plain = await fetch(`${baseUrl}/public/scripts/test.min.js`);
+  await plain.arrayBuffer();
+  assert.match(plain.headers.get('cache-control') || '', /no-cache/);
+});
+
 test('conditional request returns 304 when ETag matches', async () => {
   const first = await fetch(`${baseUrl}/public/scripts/test.min.js`);
   const etag = first.headers.get('etag');