Skip to content

Add a public changelog page and link it from the update card - #1364

Closed
RhysSullivan wants to merge 5 commits into
mainfrom
changelog-page
Closed

Add a public changelog page and link it from the update card#1364
RhysSullivan wants to merge 5 commits into
mainfrom
changelog-page

Conversation

@RhysSullivan

Copy link
Copy Markdown
Collaborator

Adds a changelog page at executor.sh/changelog, built from the CLI package's changesets changelog at build time (dependency-only bumps and changesets boilerplate are filtered out; release dates come from the npm registry). The sidebar update card now links to it on every variant, deep-linked to the newest version.

Selfhost · the web shell sidebar surfaces the update-available card (selfhost)

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 8, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
executor-cloud fe9707d Aug 28 2026, 06:22 AM

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 8, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
executor-marketing fe9707d Commit Preview URL

Branch Preview URL
Aug 28 2026, 06:21 AM

@github-actions

github-actions Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

Cloudflare preview

Torn down — the PR is closed.

@pkg-pr-new

pkg-pr-new Bot commented Jul 8, 2026

Copy link
Copy Markdown

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1364

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1364

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1364

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1364

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1364

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1364

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1364

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1364

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1364

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1364

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1364

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1364

executor

npm i https://pkg.pr.new/executor@1364

commit: fe9707d

@RhysSullivan

Copy link
Copy Markdown
Collaborator Author

Now also removes the sidebar Commands row, moves the update card into the footer section, and inlines the three most recent changelog highlights on the card (fetched from executor.sh/changelog.json, best-effort).

Changeset text is contributor-controlled, so the changelog page must not
inject it as HTML unfiltered.

- Render entry bodies through marked and then sanitize-html with a prose
  allowlist and https-only hrefs, at build time since the page is
  prerendered.
- Only link a PR reference when its URL is a pull-request permalink on
  this repository; anything else renders as plain text.
- Publish plain text from /changelog.json, so the cross-origin payload
  carries no markup, and send nosniff with it.
- Bound the client changelog fetch with a 5s timeout alongside the
  unmount signal, keeping the silent empty fallback.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant