From 0125c0531e90be0016dbbe6222629c0e7f785e01 Mon Sep 17 00:00:00 2001 From: Rob Konsdorf Date: Fri, 21 Aug 2026 13:59:22 -0400 Subject: [PATCH] docs(changelog): record what 2.3.0 ships The entries for the work since 2.2.0 were never written, so the release has no editorial text and step one of the checklist has nothing to read. The eight commits on main since the tag touch three things a consumer sees: the entry point map and the packaging metadata, the tarball no longer carrying the tests under src, and the RSA host function answering correctly inside a browser bundle. The dependency work is absent on purpose, because every lift landed in the lockfile while the declared ranges already admitted the patched releases, so an install resolves them either way and the release delivers nothing there. --- CHANGELOG.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index f17e203..79c07ed 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,23 @@ # Changelog +## [2.3.0] + +Declares a package entry point map, publishes with provenance, and fixes RSA signature verification in browser bundles. + +### Upgrading + +- The package declares an `exports` map, so `@atomichub/vert` and its `package.json` are the only resolvable entries. Import from the package name rather than reaching into `dist`. (#3) + +### Bug fixes + +- `verify_rsa_sha256_sig` returns the right answer inside a browser bundle. It read node's `Buffer` from the global object, which a bundler rewrites to `globalThis`, where no `Buffer` exists. The throw that followed was caught and reported as an invalid signature, so a valid signature verified as invalid. (#11) + +### Other changes + +- The published tarball no longer carries the test files under `src`. (#3) +- Publishes authenticate through npm trusted publishing and carry provenance. (#3) +- Package metadata gains `keywords`, `sideEffects`, and an author entry for AtomicHub. (#3) + ## [2.2.0] Renames the package to `@atomichub/vert` and gates chain-specific host functions to the emulated chain.