Skip to content

release: v1.0.18 and reproducible widget build - #237

Merged
worlddlckgh merged 1 commit into
mainfrom
release/1.0.18
Oct 28, 2026
Merged

worlddlckgh merged 1 commit into
mainfrom
release/1.0.18

Conversation

@worlddlckgh

Copy link
Copy Markdown
Contributor

Summary

  • Bump widget to 1.0.18 and ship rebuilt assets (plugin-1.0.18-*, plugin-v1.js).
  • Make widget builds reproducible: pin Node via .node-version and pnpm via packageManager; pnpm build-widget now runs scripts/build-widget.cjs (frozen install, no Webpack cache); new pnpm check-widget rebuilds into a temp dir and fails on any drift.
  • Add Verify widget artifacts GitHub workflow running pnpm check-widget on PRs and pushes to main.
  • src/library.tsx: stop inlining full package.json into the bundle (only version needed). Shrinks plugin-1.0.18.js by ~2.4 KB.
  • Remove stale npm package-lock.json (unused by the pnpm build).

Integrator impact

None expected.

  • plugin-v1.js is byte-identical to plugin-1.0.18.js.
  • window.Jupiter API unchanged; all bundled URLs/hosts identical to 1.0.17.
  • Direct deps unchanged (web3.js 1.87.6, wallet-adapter 0.2.3, react 18.3.1, react-query 5.85.5, zod 3.22.4).
  • Remaining bundle diff vs 1.0.17 comes from the lockfile migration in chore: migrate pnpm config to pnpm-workspace.yaml #236 (transitive patch/minor bumps: @babel/runtime, jayson, ws, tslib, stream-json).

Verification

  • pnpm check-widget under Node 24.15.0 / pnpm 11.2.2 reproduces all 11 committed assets byte-for-byte.
  • Rebuilt 1.0.17 source with the current lockfile: plugin-1.0.17-app.js matches the staged 1.0.18 app bundle except for the version string.

After merge

  • Clear the Cloudflare cache for plugin-v1.js.
  • Add Verify widget artifacts as a required status check on main.

🤖 Generated with Claude Code

Bump the widget to 1.0.18 and ship the rebuilt assets, including the
plugin-v1.js alias.

Make widget builds reproducible: pin Node (.node-version) and pnpm
(packageManager), build through scripts/build-widget.cjs with a frozen
install and no Webpack cache, and add `pnpm check-widget` plus a GitHub
workflow that fails when committed assets drift from source.

Stop inlining the whole package.json into the bundle; only the version
is needed. Remove the stale npm package-lock.json, which was never used
by the pnpm-based build.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@vercel

vercel Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
deprecated-terminal Ready Ready Preview Oct 28, 2026 3:27am UTC
plugin Ready Ready Preview Oct 28, 2026 3:27am UTC

@worlddlckgh
worlddlckgh merged commit d5e0a63 into main Oct 28, 2026
4 checks passed

This branch was successfully deployed

2 active deployments
Preview – deprecated-terminal — be23775e Deployed Oct 28, 2026 by vercel[bot]
Preview – plugin — be23775e Deployed Oct 28, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants