v3.0.0-rc.123

All 16 packages have been published to npm at 3.0.0-rc.123, with the latest dist-tag now pointing to this release.

📦 Publishing

• Publish all 16 packages through npm Trusted Publishing with GitHub Actions OIDC
• Promote every package to the latest dist-tag
• Attach SLSA provenance to every published package
• Verify clean npm installation of all packages and executable CLI entry points before publishing

🐛 Fixes

• Replace unresolved workspace:* dependency ranges in published tarballs
• Make the esmx CLI shebang portable across Linux and macOS
• Prevent invalid package artifacts from reaching npm with a fresh-install release gate

🔒 Release Safety

• Separate unprivileged build and OIDC-enabled publish jobs
• Publish immutable, integrity-checked tarball artifacts
• Support fail-closed, idempotent recovery from partial publishes
• Restrict releases to immutable version tags and the protected release environment

📦 Published Packages

@esmx/core, @esmx/import, @esmx/pkg-wrapper, @esmx/router, @esmx/router-react, @esmx/router-vue, @esmx/rspack, @esmx/rspack-react, @esmx/rspack-vue, @esmx/rsbuild, @esmx/rsbuild-react, @esmx/rsbuild-vue, @esmx/vite, @esmx/vite-react, @esmx/vite-vue, create-esmx

Full Changelog: v3.0.0-rc.118...v3.0.0-rc.123