v1.0.0-dev.61

1.0.0-dev.61 (2026-10-09)

Bug Fixes

• avatarVersion no longer shared across SSR requests and applied only after hydration (4739bcd)
• dev dependency hash follows the installed core package files so browsers drop stale copies (248ad37)
• plugin UI sync leaves unchanged files alone so the dev server stops reloading the page after every load (37f7167)
• plugin UI sync now only replaces client/, server/ and manifest.json, keeping plugin data files (52ccf5d)
• re-applied the request language right before SSR render to stop cross-request locale leaks (04a1553)
• resolveView waits for the theme config so parallel page and layout loads cannot render the default view (f842d85)
• routed the notification pop-up through notificationTextKey and the href navigator (4b4841a)
• TC-9.2 proves host Hook SSR on the production theme build, PUI-2.2 waits for the menu edit and asserts 404 (E2E-19 review) (c257e19)
• validated the normalised return target so dot segments cannot form a protocol-relative redirect (924ba35)

Features

• added feature set, html escaping, decoded route params and plugin notification listeners to the sdk core (88b8b71)
• added login return URL, pano.auth and layout route params to theme-core (eeb25a0)
• added page head metadata and title control (raw, hidden) to theme-core (2b60479)
• added plugin sidebars, profile navigation, context components, toast escaping and plugin notifications to theme-core (3b0c022)
• open front-end engine with named views, theme overrides, plugin kit, generated client and widgets (573eeef)