Skip to content

4.1.18 (September 14, 2026)

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Sep 21:35
· 359 commits to main since this release
v4.1.18
2069ba6
Other changes (27)
  • Move the release npm pin to 11.19.1, the patch for its bundled advisories (1ba1b61a)
  • Install the release npm from a lockfile so its pin is hash-verified (7162dcf9)
  • Override addons-linter's image-size to the release that fixes the DoS (61ace2de)
  • Spawn package managers through cross-spawn instead of a Windows shell (fa4c7620)
  • Match the missing-script path on either separator in the assets spec (96dcc6fa)
  • Credit a compiled sibling before warning that a root script is missing (ec830321)
  • Warn when a Firefox build bundles sidePanel or an MV2 chrome.action call (06d02b7f)
  • Compile root-absolute script refs through the tracer's child compilation (24e73eaf)
  • Pin every workflow action to a commit and scope write tokens to jobs (1f645c06)
  • Repin the template catalog to the special-folders lint fixes (1e8f9ae4)
  • Repin the template catalog so the scaffold builds clean for Firefox (b9fef3de)
  • Emit the MV2 content_security_policy as a string on Firefox builds (b1cea36c)
  • Repin the template catalog so scaffolds carry ids and sized icons (93b01937)
  • Normalize dist paths in the traced compile spec so Windows lists match (c2e3e204)
  • Compile the files the tracer copies instead of shipping raw source (8bcb88a2)
  • Import content script chunks via chrome.runtime.getURL for AMO (4bb32d3f)
  • Fold host permissions into permissions for a Firefox MV2 build (ffe2b207)
  • Install a pnpm workspace member from its workspace root (4dc269e7)
  • Keep go-git-it quiet and drop the fake PATH row when dev takes a URL (04111b49)
  • Show the Scorecard badge on the published package README too (fdc45390)
  • Warn with addons-linter findings after a production Firefox build (eae231e8)
  • Run the rspack suite weekly against dependency prereleases (894763b3)
  • Run the dev-reload slice weekly on the browser prerelease channels (a358ab98)
  • Publish an OpenSSF Scorecard for the repo and show it in the README (a6e445ac)
  • Run the core and CLI suites on the Node floor and on Node 24 (32176f84)
  • Pin the managed Firefox install to the stable channel (a0d066e0)
  • Describe the reload model accurately in the README (441d2ba7)
Assets 8
Loading