Hey folks, I am lining up for a big v1.0.0. Most of the work is security and stability and new features will take a back seat. Don't get it twisted though - it is not a hard rule. Issues and pull requests not relevant to either are welcome at any time. This is just where I am putting my own time.
Back to changelog:
- Drop support for MW1.42 73098e2
- Improve portability - swap remote CDN requests originating from model-viewer optional deps with local resources cfab8ae
- Do not load model-viewer (1.07MB) on pages that have no models 4dca8a2
- Cut ZIP download size - strip tests and other development folders 355dd63
- Stop model-viewer console.log messages from hitting the browser console 67752e0
- Update model-viewer from v4.0.0 to v4.3.1 0bed276
- parser: fail if vertex values are missing 498cea0
- security: constrain accessor values by introducing a generous limit b319ddf
- security: strengthen various bound checks across header bytes, binary/json payloads, scenes, and vertices e6bc817
- security: reject a gltf at upload if it uses a URI that is not traversal-free 0f174ae
- bug-fix: extension version does not show up in Special:Version b9ba466