Keysat
40a0270a99
React/ReactDOM/Babel were loaded from the unpkg CDN at runtime — react@18 and react-dom@18 weren't even exact-pinned, and none had SRI. A CDN swap (or react auto-resolving a new 18.x) could blank the whole app with no change on our side: exactly the v78/v79 blank-screen class. It also made the self-hosted box depend on outbound internet to render. Vendor the three libs into frontend/assets/vendor/ (React 18.3.1, ReactDOM 18.3.1, @babel/standalone 7.29.7) and load them same-origin with sha384 integrity attributes. They now ship inside the s9pk (Dockerfile already COPYs frontend/; server.py serves /assets/* with the path-containment check), so a CDN can never swap prod deps again and no outbound fetch is needed at runtime. Add start9/0.4/render-smoke.mjs: a jsdom render smoke check that (1) runs the shipped Babel over the app's inline JSX and asserts a classic, non-module, parseable script (the v79 ESM-import regression), and (2) mounts the app in jsdom and asserts the login UI renders (the v78 blank-screen class). Wired into the default `make` goal so every package build is gated on the frontend actually rendering — closing the "verified live via curl only" gap. jsdom is a build-time devDependency, not shipped in the image.
51 lines
2.4 KiB
TypeScript
51 lines
2.4 KiB
TypeScript
import { VersionGraph } from '@start9labs/start-sdk'
|
|
import { v_0_1_0_39 } from './v0.1.0.39'
|
|
import { v_0_1_0_40 } from './v0.1.0.40'
|
|
import { v_0_1_0_41 } from './v0.1.0.41'
|
|
import { v_0_1_0_42 } from './v0.1.0.42'
|
|
import { v_0_1_0_43 } from './v0.1.0.43'
|
|
import { v_0_1_0_44 } from './v0.1.0.44'
|
|
import { v_0_1_0_45 } from './v0.1.0.45'
|
|
import { v_0_1_0_46 } from './v0.1.0.46'
|
|
import { v_0_1_0_47 } from './v0.1.0.47'
|
|
import { v_0_1_0_48 } from './v0.1.0.48'
|
|
import { v_0_1_0_49 } from './v0.1.0.49'
|
|
import { v_0_1_0_50 } from './v0.1.0.50'
|
|
import { v_0_1_0_51 } from './v0.1.0.51'
|
|
import { v_0_1_0_52 } from './v0.1.0.52'
|
|
import { v_0_1_0_53 } from './v0.1.0.53'
|
|
import { v_0_1_0_54 } from './v0.1.0.54'
|
|
import { v_0_1_0_55 } from './v0.1.0.55'
|
|
import { v_0_1_0_56 } from './v0.1.0.56'
|
|
import { v_0_1_0_57 } from './v0.1.0.57'
|
|
import { v_0_1_0_58 } from './v0.1.0.58'
|
|
import { v_0_1_0_59 } from './v0.1.0.59'
|
|
import { v_0_1_0_60 } from './v0.1.0.60'
|
|
import { v_0_1_0_61 } from './v0.1.0.61'
|
|
import { v_0_1_0_62 } from './v0.1.0.62'
|
|
import { v_0_1_0_63 } from './v0.1.0.63'
|
|
import { v_0_1_0_64 } from './v0.1.0.64'
|
|
import { v_0_1_0_65 } from './v0.1.0.65'
|
|
import { v_0_1_0_66 } from './v0.1.0.66'
|
|
import { v_0_1_0_67 } from './v0.1.0.67'
|
|
import { v_0_1_0_68 } from './v0.1.0.68'
|
|
import { v_0_1_0_69 } from './v0.1.0.69'
|
|
import { v_0_1_0_70 } from './v0.1.0.70'
|
|
import { v_0_1_0_71 } from './v0.1.0.71'
|
|
import { v_0_1_0_72 } from './v0.1.0.72'
|
|
import { v_0_1_0_73 } from './v0.1.0.73'
|
|
import { v_0_1_0_74 } from './v0.1.0.74'
|
|
import { v_0_1_0_75 } from './v0.1.0.75'
|
|
import { v_0_1_0_76 } from './v0.1.0.76'
|
|
import { v_0_1_0_77 } from './v0.1.0.77'
|
|
import { v_0_1_0_78 } from './v0.1.0.78'
|
|
import { v_0_1_0_79 } from './v0.1.0.79'
|
|
import { v_0_1_0_80 } from './v0.1.0.80'
|
|
import { v_0_1_0_81 } from './v0.1.0.81'
|
|
import { v_0_1_0_82 } from './v0.1.0.82'
|
|
|
|
export const versionGraph = VersionGraph.of({
|
|
current: v_0_1_0_82,
|
|
other: [v_0_1_0_39, v_0_1_0_40, v_0_1_0_41, v_0_1_0_42, v_0_1_0_43, v_0_1_0_44, v_0_1_0_45, v_0_1_0_46, v_0_1_0_47, v_0_1_0_48, v_0_1_0_49, v_0_1_0_50, v_0_1_0_51, v_0_1_0_52, v_0_1_0_53, v_0_1_0_54, v_0_1_0_55, v_0_1_0_56, v_0_1_0_57, v_0_1_0_58, v_0_1_0_59, v_0_1_0_60, v_0_1_0_61, v_0_1_0_62, v_0_1_0_63, v_0_1_0_64, v_0_1_0_65, v_0_1_0_66, v_0_1_0_67, v_0_1_0_68, v_0_1_0_69, v_0_1_0_70, v_0_1_0_71, v_0_1_0_72, v_0_1_0_73, v_0_1_0_74, v_0_1_0_75, v_0_1_0_76, v_0_1_0_77, v_0_1_0_78, v_0_1_0_79, v_0_1_0_80, v_0_1_0_81],
|
|
})
|