v1.0.0 — first stable release
First stable release
All five packages shipped at 1.0.0, linked via changesets so they always bump together.
@arshad-shah/cynosure-core@1.0.0@arshad-shah/cynosure-icons@1.0.0@arshad-shah/cynosure-react@1.0.0@arshad-shah/cynosure-themes@1.0.0@arshad-shah/cynosure-tokens@1.0.0
Install
pnpm add @arshad-shah/cynosure-react @arshad-shah/cynosure-tokensPeer requirements: react@^19, react-dom@^19. See the Migration guide for the 0.x → 1.0 story (TL;DR: nothing to migrate, it's the first public release).
Semver policy from here
| Bump | Meaning |
|---|---|
| Patch | Bug fixes, no API changes |
| Minor | New components, new props, new variants — additive only |
| Major | Breaking changes, with a migration guide |
Also shipped alongside v1
A hardened release pipeline: SHA-pinned actions, required-status-check gate, production environment restricted to main, npm Trusted Publishing via OIDC (no long-lived tokens), provenance attestations, linear history, code-owner review, changeset-required-per-PR enforcement.