v0.17.0

0.17.0 (2026-02-26)

Features

• Extracting global variables (bb52df2)
• Extracting global variables (03143b8)
• Include component and component set names to help LLMs find pre-existing components in code (#122) (60c663e)
• security: add input validation to download images tool (#207) (651974e)
• security: add path sanitization to prevent directory traversal (#206) (5a18eef)
• sync fork with upstream - release-please migration, vitest, repo cleanup (2124f43)

Bug Fixes

• add NODE_AUTH_TOKEN to npm publish step in release workflow (f82d614)
• Cannot find module '~/transformers/layout' (7432d6c)
• Cannot find module '~/transformers/layout' (82a52f7)
• configure pnpm npmrc for npm registry auth in release workflow (355ddcb)
• enhance fetchWithRetry to handle error statuses in response body (803a479)
• Fix bug where MCP cannot be invoked by cursor 0.45.11 (dbea364)
• Make sure LLM provides a filename extension when calling download_figma_images (00bad7d)
• README.zh-tw typo (#236) (c65c25c)
• Remove empty keys from simplified design output (#106) (4237a53)
• Replaced the NODE_ENV setting with cross-env to improve cross-platform compatibility. (#19) (a0eeed5)
• update Node ID regex to support additional formats in download i… (#227) (68fbc87)
• use correct secret name NPM_ACCESS_TOKEN in release workflow (6800cbe)
• use npm publish instead of pnpm publish for registry auth (69cdcc2)
• write project-level .npmrc for pnpm publish auth (c93f485)