Skip to content

v0.5.0-beta.4

Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 08 Nov 15:56
· 4 commits to main since this release
c5a09d9

Known issue: The widget in this beta rejects tagged service-binding image tickets, so this new image path does not render. Upgrade to 0.5.0-beta.5 or later for the fix.

0.5.0-beta.4

This beta adds opt-in public Cloudflare Worker service bindings for approved image paths on sibling hostnames. Service bindings bypass hostname security rules: expose public directories only and change the service ID when repointing a binding. See the package README for setup.

This release includes the 0.5.0 beta changes: hosted credential requests and per-turn page context are opt-in, and the legacy secret must contain at least 32 bytes. PHP rate limiting fails closed when private storage is unavailable; configure a shared limiter on Windows. PHP image fetching on Windows remains unavailable when private locking cannot be verified. The hosted credential and page-context journeys still require deployed Gateway/CCP staging verification.

The npm latest tag remains on the stable release. This is a prerelease for testing.

Changes: #49