Skip to content

CHANGELOG.md

Latest commit

 

History

History
241 lines (147 loc) · 8.31 KB

CHANGELOG.md

File metadata and controls

241 lines (147 loc) · 8.31 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

1.5.2 - 2026-08-05

Added

  • version — add a resolvable-version predicate

Fixed

  • checks — clear the five gates blocking every release from this repo

1.5.1 - 2026-08-01

Internal

  • fleet — add the OTEL knob to ci env and bulletize the repo section

1.5.0 - 2026-07-30

Changed

  • package-url — serialize lazily and freeze narrowly in fromString
  • package-url — give toObject one object shape
  • package-url — hoist the shared throws-options bag
  • encode — skip qualifier normalization when nothing can match
  • compare — read the wildcard regex cache before the guards
  • exports — rename the published equals and matches
  • exports — rename the published Result and compare

Fixed

  • repo — redact the hosted version-metadata endpoint from the changelog and restore the docs:llms script

Internal

  • deps — deny the puppeteer postinstall like the rest of the fleet
  • deps — absorb the fleet catalog heal (claude-code 2.1.216, packageurl-js 1.4.8)

1.4.8 - 2026-07-27

Fixed

  • fuzz — sweep orphaned vitiate shm segments before the run

Internal

  • deps — bump the @socketsecurity/lib catalog pin to 6.3.0
  • deps — drop the dead esbuild devDependency — no imports remain, rolldown is the bundler
  • fleet — clear the root-files law — tier external-tools.json, untrack MCP projections, drop .env.precommit
  • fleet — restore fetch-fleet-bundle to the v1.0.14 manifest bytes
  • deps — override js-yaml to 5.2.2 for GHSA-pm4m-ph32-ghv5

1.4.7 - 2026-07-24

Internal

  • deps — update vendored @socketsecurity/lib to 6.2.3: engine-gate collapse and lazy-required purl specs trim the published bundle

1.4.6 - 2026-07-24

Added

  • build — fail the build when a bundled entry crashes at load

Fixed

  • build — stub unreachable npm-package-arg so dist/exists.js loads
  • exports — restore types condition in generated exports map

Internal

  • check — gate every published entry with a child-process load probe
  • check — gate untyped exports in public-files-are-exported
  • ci — drop the hosted version-metadata egress from weekly-update
  • deps — adopt the taze 19.16.0 single-registry patch

1.4.5 - 2026-07-24

Internal

  • deps — update @socketsecurity/lib to 6.2.1

1.4.4 - 2026-07-20

Fixed

  • tooling — lock fleet hook workspaces
  • tour — restore deterministic site generation

Internal

  • ci — complete fleet onboarding

1.4.3 - 2026-07-20

Fixed

  • tooling — lock fleet hook workspaces
  • tour — restore deterministic site generation
  • cli — identify Claude CLI integration

Internal

  • ci — complete fleet onboarding

1.3.0 - 2025-10-06

Added

  • Re-exported PURL_Type enum from @socketsecurity/registry for type-safe package ecosystem identifiers
  • Re-exported EcosystemString type for type annotations requiring valid PURL type strings
  • Documentation and usage examples for PURL_Type enum in README

1.2.0 - 2025-10-04

Added

  • Type coverage configuration with 100% coverage requirement
  • Comprehensive backward compatibility tests for validation functions

Changed

  • Converted validation functions to options pattern with backward compatibility
  • Renamed normalizePath to normalizePurlPath with options pattern
  • Refactored PackageURL types with explicit exports

Fixed

  • Fixed error handling and concurrency issues in test suite
  • Improved type safety with typed arrays replacing any[]

1.1.6 - 2025-10-03

Changed

  • Enhanced TypeScript strictness with explicit | undefined for optional properties and parameters
  • Added comprehensive JSDoc documentation for core classes
  • Optimized build output by disabling source map generation

1.1.5 - 2025-09-30

Added

  • Type-specific validation for cocoapods package names
    • Name cannot contain whitespace
    • Name cannot contain plus (+) character
    • Name cannot begin with a period
  • Type-specific validation for cpan package namespaces
    • Namespace must be UPPERCASE when present
  • Type-specific validation for swid package qualifiers
    • Requires tag_id qualifier
    • tag_id must not be empty
    • GUID format tag_id must be lowercase

Fixed

  • Error message formatting in validateStrings function

1.1.4 - 2025-09-29

Fixed

  • Fixed publishing workflow to ensure dist folder is built before npm publish
  • Changed prepublishOnly script to prevent accidental local publishing

1.1.3 - 2025-09-29

Fixed

  • Fixed tsgo transpilation bug that produced incorrect exports.encodeComponent = void 0; output

1.1.2 - 2025-09-27

Changed

  • Enhanced build performance and reliability
  • Improved package stability

1.1.1 - 2025-09-26

Changed

  • Removed pnpm engine requirement from package.json

1.1.0 - 2025-09-26

Added

  • PackageURLBuilder: Fluent API for constructing PackageURL instances with method chaining
    • Static factory methods for common package types (npm, pypi, maven, gem, golang, cargo, nuget, composer)
    • Support for all PackageURL components: type, namespace, name, version, qualifiers, and subpath
    • build() method creates validated PackageURL instances
    • from() static method creates builders from existing PackageURL instances
  • UrlConverter: URL conversion utilities for Package URLs
    • toRepositoryUrl() converts PackageURLs to repository URLs (supports 14+ package ecosystems)
    • toDownloadUrl() converts PackageURLs to download URLs for package artifacts
    • Support for multiple URL types: git, web, tarball, zip, jar, gem, wheel formats
    • getAllUrls() convenience method for getting both repository and download URLs
    • Type support checking with supportsRepositoryUrl() and supportsDownloadUrl()
  • Support for parsing Package URLs that don't start with pkg: scheme
  • Comprehensive documentation with usage examples

Changed

  • Enhanced documentation with improved structure and readability
  • Added features section highlighting key benefits

Fixed

  • Various improvements and fixes

1.0.8 - 2025-09-01

Changed

  • Updated implementation for PackageURL specification changes

1.0.7 - 2025-08-15

Fixed

  • Bug fixes and stability improvements

1.0.1 - 2025-05-15

Added

  • Initial Socket.dev optimized package override implementation

1.0.0 - 2025-05-01

Added

  • Initial release of @socketregistry/packageurl-js
  • Socket.dev optimized package override for packageurl-js
  • Full compatibility with original packageurl-js API