4.1.0 - Security update!

[Aukevanoost]

Update 4.1 adds support for the Subresource Integrity [1] and trusted types [2] safe guards in the orchestrator and runtime libraries. These opt-in features allow for more stability and safety against remoteEntry.json poisining or XSS attacks.

Checkout how the new SRI feature works in our brand new Tractor Store example!
https://native-federation.github.io/angular-examples

Core

What's Changed

• feat: watchFederationBuildCompletion now evaluates if the domain has been registered previously by @aramirezj in feat: watchFederationBuildCompletion now evaluates if the domain has been registered previously #43
• feat: Added possibility to add integrity map to remoteEntry.json by @Aukevanoost in feat: Added possibility to add integrity map to remoteEntry.json #45
• chore: Fixed find-shared-library-version and changed to opt-out by @Aukevanoost in chore: Fixed find-shared-library-version and changed to opt-out #47

New Contributors

• @aramirezj made their first contribution in feat: watchFederationBuildCompletion now evaluates if the domain has been registered previously #43

Full Changelog: v4.0.1...v4.1.0

Orchestrator

What's Changed

• chore: Added support for trusted types by @Aukevanoost in chore: Added support for trusted types orchestrator#13
• chore: Added support for Subresource Integrity @Aukevanoost in chore: Added support for trusted types orchestrator#13

Full Changelog: native-federation/orchestrator@v4.0.2...v4.1.0

---

This discussion was created from the release 4.1.0.