From 58739fb2697858f69f18701e020b156e73cda5f7 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 28 Jul 2026 18:17:22 +0000 Subject: [PATCH] chore: changeset version --- .changeset/add-max-inline-size-option.md | 5 ---- .changeset/afraid-buttons-go.md | 5 ---- .changeset/calm-keys-verify.md | 5 ---- .changeset/codesigning-plugin-auto-pubkey.md | 5 ---- .changeset/giant-dancers-sin.md | 5 ---- .changeset/gold-jokes-itch.md | 5 ---- .changeset/security-dependency-updates.md | 8 ------ .changeset/twenty-bushes-act.md | 5 ---- packages/dev-server/CHANGELOG.md | 8 ++++++ packages/dev-server/package.json | 2 +- packages/init/CHANGELOG.md | 2 ++ packages/init/package.json | 2 +- packages/plugin-expo-modules/CHANGELOG.md | 2 ++ packages/plugin-expo-modules/package.json | 2 +- packages/plugin-nativewind/CHANGELOG.md | 2 ++ packages/plugin-nativewind/package.json | 2 +- packages/plugin-reanimated/CHANGELOG.md | 2 ++ packages/plugin-reanimated/package.json | 2 +- packages/repack/CHANGELOG.md | 27 ++++++++++++++++++++ packages/repack/package.json | 2 +- 20 files changed, 49 insertions(+), 49 deletions(-) delete mode 100644 .changeset/add-max-inline-size-option.md delete mode 100644 .changeset/afraid-buttons-go.md delete mode 100644 .changeset/calm-keys-verify.md delete mode 100644 .changeset/codesigning-plugin-auto-pubkey.md delete mode 100644 .changeset/giant-dancers-sin.md delete mode 100644 .changeset/gold-jokes-itch.md delete mode 100644 .changeset/security-dependency-updates.md delete mode 100644 .changeset/twenty-bushes-act.md diff --git a/.changeset/add-max-inline-size-option.md b/.changeset/add-max-inline-size-option.md deleted file mode 100644 index df4dd34da..000000000 --- a/.changeset/add-max-inline-size-option.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@callstack/repack": minor ---- - -Add `maxInlineSize` option to assets loader for size-based asset inlining. Use it together with `inline: true` — assets whose largest variant is within the threshold are inlined as base64 URIs; larger assets are extracted as separate files. diff --git a/.changeset/afraid-buttons-go.md b/.changeset/afraid-buttons-go.md deleted file mode 100644 index 65b7d4249..000000000 --- a/.changeset/afraid-buttons-go.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@callstack/repack": minor ---- - -Allow customizing the native HTTP client used to download remote scripts: `RemoteScriptLoader.okHttpClientFactory` on Android and `ScriptManager.urlSessionFactory` on iOS (for SSL pinning, interceptors, custom headers, timeouts, etc.) diff --git a/.changeset/calm-keys-verify.md b/.changeset/calm-keys-verify.md deleted file mode 100644 index 4fbd4b465..000000000 --- a/.changeset/calm-keys-verify.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@callstack/repack": patch ---- - -Prevent excessive regular-expression backtracking when validating per-script public keys. diff --git a/.changeset/codesigning-plugin-auto-pubkey.md b/.changeset/codesigning-plugin-auto-pubkey.md deleted file mode 100644 index 766d80515..000000000 --- a/.changeset/codesigning-plugin-auto-pubkey.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@callstack/repack": minor ---- - -Add `publicKeyPath` and `nativeProjectPaths` options to `CodeSigningPlugin`. When `publicKeyPath` is set, the plugin automatically embeds the public key into `Info.plist` (iOS) and `strings.xml` (Android) during compilation, removing the need for manual native file setup. The `embedPublicKey` utility is also exported for standalone use. diff --git a/.changeset/giant-dancers-sin.md b/.changeset/giant-dancers-sin.md deleted file mode 100644 index 53427abfb..000000000 --- a/.changeset/giant-dancers-sin.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@callstack/repack": patch ---- - -Fix CodeSigningPlugin signing assets at processAssets ANALYSE stage (2000) instead of assetEmitted, ensuring bundles are signed before plugins running at REPORT stage (5000) such as withZephyr() can capture and upload them diff --git a/.changeset/gold-jokes-itch.md b/.changeset/gold-jokes-itch.md deleted file mode 100644 index 50929205f..000000000 --- a/.changeset/gold-jokes-itch.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@callstack/repack": patch ---- - -Add support for passing a per-script `publicKey` from `ScriptManager` resolvers so signed bundles can be verified with a runtime-provided public key instead of only the app-embedded `RepackPublicKey` diff --git a/.changeset/security-dependency-updates.md b/.changeset/security-dependency-updates.md deleted file mode 100644 index dc70fa7e7..000000000 --- a/.changeset/security-dependency-updates.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -"@callstack/repack": patch -"@callstack/repack-dev-server": patch ---- - -Update dependencies to resolve reported security advisories. - -`@callstack/repack-dev-server` raises its minimum versions for `@fastify/middie`, `fastify`, `http-proxy-middleware`, `launch-editor` and `ws`. `@callstack/repack` raises `image-size`, and pins `terser-webpack-plugin` to 5.5.0: it no longer depends on the vulnerable `serialize-javascript`, and it is the last release before 5.6.0, which silently skips minification under Rspack and leaves production bundles unminified. All bumps stay within the existing major versions, so there are no API changes. diff --git a/.changeset/twenty-bushes-act.md b/.changeset/twenty-bushes-act.md deleted file mode 100644 index f828c1b6d..000000000 --- a/.changeset/twenty-bushes-act.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@callstack/repack": patch ---- - -Fix Android dev-server URLs on physical devices by preserving `localhost` instead of rewriting it to `10.0.2.2`. diff --git a/packages/dev-server/CHANGELOG.md b/packages/dev-server/CHANGELOG.md index 1fba9ca46..1674215fb 100644 --- a/packages/dev-server/CHANGELOG.md +++ b/packages/dev-server/CHANGELOG.md @@ -1,5 +1,13 @@ # @callstack/repack-dev-server +## 5.3.0 + +### Patch Changes + +- [#1409](https://github.com/callstack/repack/pull/1409) [`742d575`](https://github.com/callstack/repack/commit/742d57551dc652b3e1803e72d8f021f9e22363de) Thanks [@dannyhw](https://github.com/dannyhw)! - Update dependencies to resolve reported security advisories. + + `@callstack/repack-dev-server` raises its minimum versions for `@fastify/middie`, `fastify`, `http-proxy-middleware`, `launch-editor` and `ws`. `@callstack/repack` raises `image-size`, and pins `terser-webpack-plugin` to 5.5.0: it no longer depends on the vulnerable `serialize-javascript`, and it is the last release before 5.6.0, which silently skips minification under Rspack and leaves production bundles unminified. All bumps stay within the existing major versions, so there are no API changes. + ## 5.2.5 ### Patch Changes diff --git a/packages/dev-server/package.json b/packages/dev-server/package.json index 987e41e92..3d30d412f 100644 --- a/packages/dev-server/package.json +++ b/packages/dev-server/package.json @@ -2,7 +2,7 @@ "name": "@callstack/repack-dev-server", "description": "A bundler-agnostic development server for React Native applications as part of @callstack/repack.", "license": "MIT", - "version": "5.2.5", + "version": "5.3.0", "type": "module", "main": "./dist/index.js", "types": "./dist/index.d.ts", diff --git a/packages/init/CHANGELOG.md b/packages/init/CHANGELOG.md index c858bf98c..29077a94e 100644 --- a/packages/init/CHANGELOG.md +++ b/packages/init/CHANGELOG.md @@ -1,5 +1,7 @@ # @callstack/repack-init +## 5.3.0 + ## 5.2.5 ### Patch Changes diff --git a/packages/init/package.json b/packages/init/package.json index f047de7c7..132ab47e7 100644 --- a/packages/init/package.json +++ b/packages/init/package.json @@ -3,7 +3,7 @@ "description": "Automates the integration of the @callstack/repack into React-Native projects", "author": "Jakub Romańczyk ", "license": "MIT", - "version": "5.2.5", + "version": "5.3.0", "homepage": "https://github.com/callstack/repack", "repository": { "type": "git", diff --git a/packages/plugin-expo-modules/CHANGELOG.md b/packages/plugin-expo-modules/CHANGELOG.md index 1c9314d73..6bbf52e84 100644 --- a/packages/plugin-expo-modules/CHANGELOG.md +++ b/packages/plugin-expo-modules/CHANGELOG.md @@ -1,5 +1,7 @@ # @callstack/repack-plugin-expo-modules +## 5.3.0 + ## 5.2.5 ### Patch Changes diff --git a/packages/plugin-expo-modules/package.json b/packages/plugin-expo-modules/package.json index 8587710f9..990fe183b 100644 --- a/packages/plugin-expo-modules/package.json +++ b/packages/plugin-expo-modules/package.json @@ -1,6 +1,6 @@ { "name": "@callstack/repack-plugin-expo-modules", - "version": "5.2.5", + "version": "5.3.0", "description": "A plugin for @callstack/repack that integrates Expo Modules", "author": "Jakub Romańczyk ", "license": "MIT", diff --git a/packages/plugin-nativewind/CHANGELOG.md b/packages/plugin-nativewind/CHANGELOG.md index 9c9a66184..3def92daa 100644 --- a/packages/plugin-nativewind/CHANGELOG.md +++ b/packages/plugin-nativewind/CHANGELOG.md @@ -1,5 +1,7 @@ # @callstack/repack-plugin-nativewind +## 5.3.0 + ## 5.2.5 ### Patch Changes diff --git a/packages/plugin-nativewind/package.json b/packages/plugin-nativewind/package.json index 0fd4cc708..790d88b61 100644 --- a/packages/plugin-nativewind/package.json +++ b/packages/plugin-nativewind/package.json @@ -1,6 +1,6 @@ { "name": "@callstack/repack-plugin-nativewind", - "version": "5.2.5", + "version": "5.3.0", "description": "A plugin for @callstack/repack that integrates NativeWind", "author": "Boris Yankov ", "contributors": ["Jakub Romańczyk "], diff --git a/packages/plugin-reanimated/CHANGELOG.md b/packages/plugin-reanimated/CHANGELOG.md index 14dba4711..54c0ada9a 100644 --- a/packages/plugin-reanimated/CHANGELOG.md +++ b/packages/plugin-reanimated/CHANGELOG.md @@ -1,5 +1,7 @@ # @callstack/repack-plugin-reanimated +## 5.3.0 + ## 5.2.5 ### Patch Changes diff --git a/packages/plugin-reanimated/package.json b/packages/plugin-reanimated/package.json index 0f3d51ec6..b22ede562 100644 --- a/packages/plugin-reanimated/package.json +++ b/packages/plugin-reanimated/package.json @@ -1,6 +1,6 @@ { "name": "@callstack/repack-plugin-reanimated", - "version": "5.2.5", + "version": "5.3.0", "description": "A plugin for @callstack/repack that integrates react-native-reanimated", "author": "Jakub Romańczyk ", "license": "MIT", diff --git a/packages/repack/CHANGELOG.md b/packages/repack/CHANGELOG.md index cbca855fa..85794b7bb 100644 --- a/packages/repack/CHANGELOG.md +++ b/packages/repack/CHANGELOG.md @@ -1,5 +1,32 @@ # @callstack/repack +## 5.3.0 + +### Minor Changes + +- [#1378](https://github.com/callstack/repack/pull/1378) [`d806b04`](https://github.com/callstack/repack/commit/d806b04a5b36ebcf9ca27c3aa895fdd2a70623d2) Thanks [@bartekkrok](https://github.com/bartekkrok)! - Add `maxInlineSize` option to assets loader for size-based asset inlining. Use it together with `inline: true` — assets whose largest variant is within the threshold are inlined as base64 URIs; larger assets are extracted as separate files. + +- [#1376](https://github.com/callstack/repack/pull/1376) [`daad54d`](https://github.com/callstack/repack/commit/daad54d3417b9df3749e5424d8c3061a6cf7a0e1) Thanks [@whydidoo](https://github.com/whydidoo)! - Allow customizing the native HTTP client used to download remote scripts: `RemoteScriptLoader.okHttpClientFactory` on Android and `ScriptManager.urlSessionFactory` on iOS (for SSL pinning, interceptors, custom headers, timeouts, etc.) + +- [#1381](https://github.com/callstack/repack/pull/1381) [`997816e`](https://github.com/callstack/repack/commit/997816e16e1e6de1b5fcd57ea2591a53aaa3d42b) Thanks [@bartekkrok](https://github.com/bartekkrok)! - Add `publicKeyPath` and `nativeProjectPaths` options to `CodeSigningPlugin`. When `publicKeyPath` is set, the plugin automatically embeds the public key into `Info.plist` (iOS) and `strings.xml` (Android) during compilation, removing the need for manual native file setup. The `embedPublicKey` utility is also exported for standalone use. + +### Patch Changes + +- [#1417](https://github.com/callstack/repack/pull/1417) [`376c996`](https://github.com/callstack/repack/commit/376c99603ac482e042aeca034877dacf73f7b5ca) Thanks [@dannyhw](https://github.com/dannyhw)! - Prevent excessive regular-expression backtracking when validating per-script public keys. + +- [#1379](https://github.com/callstack/repack/pull/1379) [`8ab3105`](https://github.com/callstack/repack/commit/8ab3105c5c5e4b3cbe58489adc031a9d02b709fe) Thanks [@JhohellsDL](https://github.com/JhohellsDL)! - Fix CodeSigningPlugin signing assets at processAssets ANALYSE stage (2000) instead of assetEmitted, ensuring bundles are signed before plugins running at REPORT stage (5000) such as withZephyr() can capture and upload them + +- [#1382](https://github.com/callstack/repack/pull/1382) [`ac3577b`](https://github.com/callstack/repack/commit/ac3577be686ec8d0e850e72ddb1ffa24747c3f4c) Thanks [@MikitasK](https://github.com/MikitasK)! - Add support for passing a per-script `publicKey` from `ScriptManager` resolvers so signed bundles can be verified with a runtime-provided public key instead of only the app-embedded `RepackPublicKey` + +- [#1409](https://github.com/callstack/repack/pull/1409) [`742d575`](https://github.com/callstack/repack/commit/742d57551dc652b3e1803e72d8f021f9e22363de) Thanks [@dannyhw](https://github.com/dannyhw)! - Update dependencies to resolve reported security advisories. + + `@callstack/repack-dev-server` raises its minimum versions for `@fastify/middie`, `fastify`, `http-proxy-middleware`, `launch-editor` and `ws`. `@callstack/repack` raises `image-size`, and pins `terser-webpack-plugin` to 5.5.0: it no longer depends on the vulnerable `serialize-javascript`, and it is the last release before 5.6.0, which silently skips minification under Rspack and leaves production bundles unminified. All bumps stay within the existing major versions, so there are no API changes. + +- [#1380](https://github.com/callstack/repack/pull/1380) [`856f1c1`](https://github.com/callstack/repack/commit/856f1c1253538205750dccadb77334f31523568f) Thanks [@MikitasK](https://github.com/MikitasK)! - Fix Android dev-server URLs on physical devices by preserving `localhost` instead of rewriting it to `10.0.2.2`. + +- Updated dependencies [[`742d575`](https://github.com/callstack/repack/commit/742d57551dc652b3e1803e72d8f021f9e22363de)]: + - @callstack/repack-dev-server@5.3.0 + ## 5.2.5 ### Patch Changes diff --git a/packages/repack/package.json b/packages/repack/package.json index fb5ccced7..6efd68f82 100644 --- a/packages/repack/package.json +++ b/packages/repack/package.json @@ -1,6 +1,6 @@ { "name": "@callstack/repack", - "version": "5.2.5", + "version": "5.3.0", "description": "A toolkit to build your React Native application with Rspack or Webpack.", "type": "commonjs", "main": "./dist/index.js",