Skip to content

Version Packages - #482

Merged
kvz merged 1 commit into
mainfrom
changeset-release/main
Aug 31, 2026
Merged

Version Packages#482
kvz merged 1 commit into
mainfrom
changeset-release/main

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@transloadit/utils@4.7.1

Patch Changes

  • ed75f00: Add a framework-neutral createSmartCdnImageCandidates policy with an injected signer, and make
    the existing Node candidate helper share it. Optional intrinsic source dimensions now prevent
    upscaling and renditions whose derived height exceeds Smart CDN's image limit. Framework adapters
    can reuse the exported format and width normalization instead of copying those limits.

    Candidate policy now distinguishes millisecond timestamps from accidentally seconds-based expiry
    values and reports an invalid width by its index. Runtime null qualities are rejected consistently
    with the exported TypeScript contract instead of being treated as an omitted format.

    Ignore a legacy caller-provided sig while signing instead of including a value that the generated
    signature replaces, which could otherwise produce an unverifiable URL.
    Unsigned URLs now omit caller-provided auth_key, exp, and sig fields so they remain
    unambiguously unsigned and round-trip through the parser.

    Require callers to select a trusted workspace Template explicitly. The helper no longer defaults
    to the arbitrary-origin builtin/serve-image Template. Require a separate browser fallbackUrl
    because Template inputs are not necessarily browser-resolvable URLs. These intentional patch-level
    replacements affect only the newly introduced, not-yet-adopted image-candidate API.

@kvz
kvz merged commit f1957b2 into main Aug 31, 2026
@kvz
kvz deleted the changeset-release/main branch August 31, 2026 13:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant