v0.4.0

Packages

Published to npm, each with a provenance attestation the release verified before this
draft was made. Attached below are the tarballs npm is serving, and a bill of
materials for what they carry: sbom.cyclonedx.json (CycloneDX 1.7) and
sbom.spdx.json (SPDX 2.3), both from pnpm sbom --prod, so they describe the
production dependency closure of this tag and not the tooling this repository builds
with. Their root component is the workspace itself.

• @stayingupwind/adapter@0.4.0 — https://slsa.dev/provenance/v1
• @stayingupwind/auth@0.4.0 — https://slsa.dev/provenance/v1
• @stayingupwind/core@0.4.0 — https://slsa.dev/provenance/v1
• create-upwind@0.4.0 — https://slsa.dev/provenance/v1
• @stayingupwind/runtime@0.4.0 — https://slsa.dev/provenance/v1
• @stayingupwind/sdk@0.4.0 — https://slsa.dev/provenance/v1
• upwind@0.4.0 — https://slsa.dev/provenance/v1

What's Changed

• feat(adapter): three seams a host needs to see what an application does by @k-taro56 in #54
• fix(runtime): say what the Function failed with, where nothing else can by @k-taro56 in #57
• ci: retire the bootstrap credential, and let the site install 0.3.0 by @k-taro56 in #55
• fix(runtime): a failure body that cannot itself fail, and counts what it says it counts by @k-taro56 in #58
• chore: build against Next.js 16.3.8, which is the security release by @k-taro56 in #59
• feat: say when a project's Next.js is older than the fixes it is missing by @k-taro56 in #60
• feat: authentication a project can start with before it has configured any by @k-taro56 in #56
• feat(adapter): let a host leave the prefetch segments out of the Function by @k-taro56 in #62
• fix(runtime): ask the host for a segment the Function was not given by @k-taro56 in #63
• Smaller Functions: the middleware carries what its path reads, the runtime minified and without zod, twin chunks loaded once by @soleil-colza in #51
• Answer a regeneration's visitor from its render, and regenerate nothing in front of a prefetch by @soleil-colza in #47
• Write cached fetches behind the prerender, and answer the middleware from the manifest's head by @soleil-colza in #46
• Read the data cache in each request that needs it, and base64 through the platform's codec by @soleil-colza in #45
• Split a large application's routes across app Functions by @k-taro56 in #64
• deploy-tests: a deployment that fails says why where the suite's log will show it by @k-taro56 in #79
• fix(runtime): upload a regeneration's outputs four at a time by @soleil-colza in #78
• Serve the shell to Googlebot and to a speculative navigation, and run a crawler list only where its cost is bounded by @soleil-colza in #52
• Carry a build's source maps through index maps and the hooks that delete them by @k-taro56 in #80
• deploy-tests: a settle the operator gives, waited out before the suite starts by @k-taro56 in #81
• Merge #52 and #80 on the line before #51, for the host that pins both by @soleil-colza in #82
• runtime: answer a segment prefetch it cannot serve with Next.js's 404, not the page's payload by @k-taro56 in #84
• core: judge a prefetch's x-deployment-id as a dpl, instead of turning it away as internal by @k-taro56 in #85
• adapter: accept constants and punycode, which workerd implements in full by @k-taro56 in #83
• adapter: ship a file a server module refers to by URL, and tell the Turbopack runtime where it is by @k-taro56 in #86
• runtime: answer a Pages Router miss with its error page under a 404 when the build wrote no /404 by @k-taro56 in #87
• docs(web-site): the bundle directory by its name, now that the site installs it by @k-taro56 in #88
• chore(deps): every open Dependabot bump in one PR, TypeScript aside by @k-taro56 in #89
• runtime: see a request that may change something through to its answer, whatever became of its client by @k-taro56 in #90
• feat(runtime): tell the edge which tags a request invalidated at once by @k-taro56 in #94
• adapter, runtime: answer a rewrite that lands on a file under _next/static from the host by @k-taro56 in #92
• docs(runtime): say what reads a Function's env back, not one application's clients by @k-taro56 in #95
• adapter: let a dynamic load the code catches itself through the audit, and record it as guarded by @k-taro56 in #91
• Keep the documents a router-only rule cannot touch, and route a build with a base path by @soleil-colza in #43
• Serve the pages of a trailingSlash build at the spelling they are asked for by @soleil-colza in #44
• Compile a rule list's patterns once, skip data routes for a page, and classify HEAD as GET by @soleil-colza in #49
• adapter: read an import's chain past its handler, and let a switch be plain by @k-taro56 in #97
• feat(runtime): say at which revision of the scope a request's at-once invalidations were recorded by @k-taro56 in #99
• fix(deploy-tests): send the suite to a deployment's own URL, where the host gives one by @k-taro56 in #98
• fix(core): keep zod out of the middleware's runtime again by @soleil-colza in #96
• perf(runtime): one call for a turn's invalidation, use cache writes behind the render, tags read with the value by @k-taro56 in #101
• fix: preserve Reporting-Endpoints in shell response headers by @k-taro56 in #102
• Neutralize user-facing runtime and size-limit wording by @soleil-colza in #100
• fix(deploy-tests): wait out the project's previous run, and build and run the suites as Next.js's own jobs do by @k-taro56 in #104
• fix(runtime): read a prerender's placeholders against its route, not every bracket as one by @k-taro56 in #105
• fix(runtime): refuse what a page answers no read of, with Allow, where Next.js does by @k-taro56 in #106
• Complete first-request App Router output and keep redirects valid by @soleil-colza in #103
• runtime: run Sentry's random reads in the context the request entered with by @k-taro56 in #93
• fix(runtime): resume a blocking partially prerendered page no generation answered by @k-taro56 in #109
• fix(adapter): let a Function's fetch to its own hostname reach it by @k-taro56 in #107
• fix(core): keep x-next-cache-tags off a relayed response by @k-taro56 in #108
• revert(runtime): leave the unkept miss to the build's path, which #103 renders once by @k-taro56 in #110
• fix(core): read a blocking route's own entry as its class, which Next.js 16.3 calls a page by @k-taro56 in #111
• fix(deploy-tests): give a deployment the suite's own variables, read against the harness's environment by @k-taro56 in #112
• feat: the Workflow SDK, its flow route a Function of its own by @soleil-colza in #61
• fix(deploy-tests): leave Next.js's stack size out of a suite's variables, and put a value too short for a secret up as it is by @k-taro56 in #113
• fix(deploy-tests): run a fixture that pins npm with the pnpm every other fixture runs by @k-taro56 in #115
• feat(core): bound the cost of a routing pattern before it is tested by @soleil-colza in #116
• fix(runtime): give a request that came without a Host header the host of the URL it was asked under by @k-taro56 in #117
• fix(runtime): answer a Pages Router miss with the App Router's not-found where there is one by @k-taro56 in #114
• feat(core): name wh...

v0.3.0

Packages

Published to npm, each with a provenance attestation the release verified before this
draft was made. Attached below are the tarballs npm is serving, and a bill of
materials for what they carry: sbom.cyclonedx.json (CycloneDX 1.7) and
sbom.spdx.json (SPDX 2.3), both from pnpm sbom --prod, so they describe the
production dependency closure of this tag and not the tooling this repository builds
with. Their root component is the workspace itself.

• @stayingupwind/adapter@0.3.0 — https://slsa.dev/provenance/v1
• @stayingupwind/core@0.3.0 — https://slsa.dev/provenance/v1
• create-upwind@0.3.0 — https://slsa.dev/provenance/v1
• @stayingupwind/runtime@0.3.0 — https://slsa.dev/provenance/v1
• @stayingupwind/sdk@0.3.0 — https://slsa.dev/provenance/v1
• upwind@0.3.0 — https://slsa.dev/provenance/v1

What's Changed

• ci: retire the bootstrap credential, again by @k-taro56 in #23
• revert: take the shared answer out again by @k-taro56 in #7
• fix(adapter): hold each patch to the copies it has to reach, not to a name by @k-taro56 in #24
• ci: draft the GitHub Release, and stop by @k-taro56 in #26
• feat: support Next.js 16.2 by @k-taro56 in #25
• feat: the agent rules Next.js writes, in a project upwind made and upwind runs by @k-taro56 in #27
• Zero-config storage for upwind dev and upwind build by @k-taro56 in #28
• feat(web-site): the project's own site, in English and Japanese by @k-taro56 in #29
• Close the four CodeQL alerts, and let the linter find them next time by @k-taro56 in #30
• chore(deps): twelve catalog pins in one, and unicorn 76's new mind about shape by @k-taro56 in #34
• fix(adapter): stop refusing a Function for a limit Cloudflare removed by @k-taro56 in #36
• feat(upwind): on Vercel, name no adapter by @k-taro56 in #37
• Name a build's prefetch segments, so a host can serve them itself by @k-taro56 in #38
• feat(deploy-tests): run Next.js's own deploy-mode suite against a real deployment by @k-taro56 in #31
• docs: a readme that says what upwind is, in English and Japanese by @soleil-colza in #40
• Run the whole deploy-mode manifest, in shards, one project per shard by @k-taro56 in #41
• Classify a segment prefetch with the route it is part of by @k-taro56 in #39
• refactor: a bundle directory and a module scheme named for what reads them by @k-taro56 in #42
• chore: 0.3.0, and the credential that first publishes the SDK by @k-taro56 in #48
• ci: give the registry probe a deadline, a retry, and a quiet 404 by @k-taro56 in #50

New Contributors

• @soleil-colza made their first contribution in #40

Full Changelog: v0.2.0...v0.3.0