Skip to content

build: modernize public package architecture - #537

Merged
blove merged 8 commits into
mainfrom
blove/security-modernization-pr3
Aug 30, 2026
Merged

blove merged 8 commits into
mainfrom
blove/security-modernization-pr3

Conversation

@blove

@blove blove commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

Summary

  • replace tsup with one shared tsdown architecture for all four public packages while retaining first-class ESM and CommonJS package-root imports
  • define and test the public compatibility contract: ES2018 syntax, explicit runtime APIs, canonical root CSS exports, private deep-import rejection, and real Vite/Webpack consumer builds
  • support React 18.0.0 through React 19 with exact type/runtime matrices, SSR hydration checks, interaction checks, and a React 17 rejection guard
  • replace the transitional advisory allowlist with a fail-closed zero-advisory audit in CI and release workflows

Validation

  • pnpm lint
  • pnpm test
  • pnpm typecheck
  • pnpm build
  • pnpm api:check
  • pnpm lint:packaging
  • pnpm typecheck:public
  • pnpm typecheck:performance
  • pnpm publish:preflight
  • pnpm format
  • pnpm security:audit
  • pnpm consumer:check
  • pnpm react:compat
  • pnpm install --frozen-lockfile
  • detached Changesets version proof after branch push

Release Notes

  • Changeset added for minor releases of @pretable/core, @pretable/react, @pretable/stream-adapter, and @pretable/ui.
  • The version proof computes 0.11.0 for all four public packages and updates dependent private workspaces coherently.

Screenshots Or Benchmarks

  • Website production smoke, Chromium: 165 passed, 2 production-mode skips
  • Website production smoke, WebKit: 165 passed, 2 production-mode skips
  • Benchmark production preview, Chromium: 28 passed
  • Resident-cap memory: 13.13 MB page-attributable, below the 32 MB ceiling

Contributor Checklist

  • I read CONTRIBUTING.md.
  • I followed CODE_OF_CONDUCT.md.
  • I am not disclosing a security vulnerability publicly.

@vercel

vercel Bot commented Aug 30, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
pretable Ignored Ignored Aug 30, 2026 7:16pm

Request Review

@github-actions

Copy link
Copy Markdown
Contributor

Vercel preview ready

Preview: https://pretable-lub2m5o4e-cacheplane.vercel.app
Commit: eb20e4f896f2d06b7f434d9c2934f36a79567204

Updated automatically by the deploy-preview job.

@blove
blove merged commit ab87c43 into main Aug 30, 2026
21 checks passed
@blove
blove deleted the blove/security-modernization-pr3 branch August 30, 2026 19:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant