Skip to content

v0.10.9: devcheck dep-specifier and plugin-manifest guards

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 20 Jun 07:52
v0.10.9
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
0c5b9cc
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

devcheck dep-specifier and plugin-manifest guards

Added:

  • check-dependency-specifiers devcheck step (--no-dep-specifiers): hard-fails on floating specifiers (latest/*/dist-tags) in package.json's four dependency sections and bun.lock's workspaces map, never the packages section. latest fails in every section; */next/beta/canary/rc fail in dependencies/devDependencies but are allowed in peer/optional. Catches bun update --latest writing a latest dist-tag into the lock's workspace map past the package.json range. Static and local — runs in the default and --fast passes. (#246)
  • lint:packaging check 10: validates .claude-plugin/plugin.json, .codex-plugin/plugin.json, .codex-plugin/mcp.json when present — non-empty descriptions, unscoped machine name on display fields, full package name on the npx -y install arg (an unscoped arg for a scoped package 404s). Gated by devcheck.config.json packaging.pluginManifests (default on). The Packaging gate now also runs when a plugin manifest is present. (#240)

Dependency bumps:

  • @cloudflare/workers-types 4.20260619.1 → 4.20260620.1

3931 tests pass; bun run devcheck clean.

Assets 2
Loading