github emdash-cms/emdash @emdash-cms/plugin-cli@0.13.6

Patch Changes

  • #4483 7d48e95 Thanks @emdash-autofix! - Updates the Zod dependency from 4.5.4 to 4.6.7 to address the reported high-severity npm audit warning for the older version. Upgrade EmDash and any separately installed plugin tooling to receive the updated dependency; refreshing a lockfile alone cannot replace the previous exact pin.

    Oversized repeater arrays now report the array-length error without validating their rows. Arrays within the configured limit still report individual row errors.

  • #2817 dfbb9fc Thanks @scottbuscemi! - Fixes config-registered plugins showing their identifier instead of their display name and omitting their description in the admin Plugins list.

  • #4467 4a38041 Thanks @emdash-autofix! - Fixes generated delegated release workflows so the release Action can upload the selected plugin's release.artifacts icon, banner, and screenshots, including when the package requires provenance. Previously, delegated releases included only the package artifact.

    Use the updated emdash-cms/emdash/apps/release-action for existing workflows. Root-level plugins need only the updated Action. For nested plugins, pass plugin-directory: ${{ steps.prepare.outputs.plugin-directory }} to the publish Action alongside bundle-file. Image paths are relative to that plugin's emdash-plugin.jsonc file.

  • #4370 4e95f4f Thanks @danielmlr! - Updates the registry search descriptions in the searchPackages lexicon, the emdash-plugin search help, and RegistryCollectionFilter.q: search also matches a package's slug and its publisher's handle without the domain ending (meekmedia for meekmedia.bsky.social), and matches the last word as a prefix.

  • Updated dependencies [7d48e95, 4e95f4f]:

    • @emdash-cms/plugin-types@0.6.1
    • @emdash-cms/registry-lexicons@0.7.1
    • @emdash-cms/registry-verification@0.3.5
    • @emdash-cms/registry-client@0.7.2

Don't miss a new emdash release

NewReleases is sending notifications on new releases.