Skip to content

v0.3.4 — first automated release, smaller JSR bundle

Latest
Latest

Choose a tag to compare

View all tags
@RickCogley RickCogley released this 29 Apr 08:38
· 4 commits to main since this release
v0.3.4
74cda71
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First release after the devkit-baseline merge. No public API changes — but the JSR install is now significantly smaller and ships through automated CI for the first time.

What's new

  • Smaller JSR bundle. The package now publishes only mod.ts, index.ts, ui/**, tokens/**, utils/**, assets/*.ts, README.md, and LICENSE — instead of the entire repository. Previously every install of @esolia/marquis was pulling assets/ (raw SVGs), docs/, docs-site/, and examples/ into your node_modules. Bundle size drops accordingly.
  • First automated release. This release is published via GitHub Actions (publish.yml) with provenance via OIDC. All future v* tag pushes will auto-publish.
  • Continuous security scanning now runs on every push and PR — Trivy filesystem scan, Gitleaks secret scan, Semgrep SAST, and Syft SBOM (vendored from eSolia/devkit's reusable workflow).

What this isn't

This release does not include the ui/icon-button.ts slow-types cleanup (13 symbols missing explicit type annotations). That's tracked separately and will land in a follow-up. --allow-slow-types is used in the publish workflow for now.

Install

# Deno
deno add jsr:@esolia/marquis

# Node.js / Bun
npx jsr add @esolia/marquis

See the README for usage.

Assets 2
Loading