@unlayer/react-elements 0.3.0: Tailwind, Markdown, code, fonts, async, codegen and editor-parity fixes

.github/workflows/publish.yml

@@ -1,7 +1,8 @@
 # Release & Publish
 #
 # Gated publish flow, one package at a time:
-#   1. PR merged to main → triggers build & test
+#   1. PR merged to main → triggers build & test, and the react package's
+#      suite on each React it supports (react-versions.yml)
 #   2. Each package publishes only when its code changed since its last
 #      release tag (Elements: v*, migrate: migrate-v*)
 #   3. A reviewer approves each publish in the Actions UI (environment gate)
@@ -160,9 +161,18 @@ jobs:
           echo "migrate=$MIGRATE" >> $GITHUB_OUTPUT
           echo "Elements changed: $ELEMENTS, migrate changed: $MIGRATE"
 
+  # The react package's suite on each React it supports, for this run's commit: Elements publishes only when every
+  # one passes (test.yml runs it too, but nothing waits for that run).
+  react-versions:
+    name: React versions
+    needs: changes
+    if: needs.changes.outputs.elements == 'true'
+    uses: ./.github/workflows/react-versions.yml
+    secrets: inherit
+
   publish:
     name: Publish @unlayer/react-elements
-    needs: [build-and-test, changes]
+    needs: [build-and-test, changes, react-versions]
     if: needs.changes.outputs.elements == 'true'
     runs-on: ubuntu-latest
     outputs:
@@ -322,11 +332,13 @@ jobs:
       # version numbers, then npm publish handles OIDC trusted publishing.
       # npm publish alone does NOT understand catalog: and would ship broken deps.
       # No --provenance flag yet: the repository is public now, so it can be added.
+      # A version can't be changed once it's on npm: the tarball must have its license (see test.yml's pack step).
       - name: Publish to npm (trusted publishing)
         working-directory: packages/react
         run: |
           pnpm pack --pack-destination /tmp
           TARBALL=$(ls /tmp/unlayer-react-elements-*.tgz)
+          tar tzf "$TARBALL" | grep -qx package/LICENSE || { echo "::error::$TARBALL has no LICENSE"; exit 1; }
           npm publish "$TARBALL" --access public
 
       - name: Tag release
@@ -498,6 +510,7 @@ jobs:
         run: |
           pnpm pack --pack-destination /tmp
           TARBALL=$(ls /tmp/unlayer-migrate-*.tgz)
+          tar tzf "$TARBALL" | grep -qx package/LICENSE || { echo "::error::$TARBALL has no LICENSE"; exit 1; }
           npm publish "$TARBALL" --access public
 
       - name: Tag release

.github/workflows/react-canary.yml

@@ -0,0 +1,53 @@
+name: React canary
+
+# Weekly, the react package's renderer (src/engine) against React's canary: what changes in React before it ships.
+# It reports and doesn't block: a failure here is a heads-up to update the React version table
+# (packages/react/src/engine/react-compat.ts) or the walker before that React is released.
+on:
+  schedule:
+    - cron: '0 6 * * 1' # Mondays at 6am UTC
+  workflow_dispatch:
+
+jobs:
+  canary:
+    name: React canary (fuzz)
+    runs-on: ubuntu-latest
+    continue-on-error: true
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js 20
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9.7.0
+
+      - name: Authenticate npm registry
+        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.TEST_NPM_TOKEN }}" > ~/.npmrc
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Install React's canary
+        run: |
+          pnpm --filter @unlayer/react-elements add -D react@canary react-dom@canary
+          node -e "console.log('React', require('./packages/react/node_modules/react/package.json').version)"
+
+      - name: Build
+        run: pnpm --filter @unlayer-internal/shared-elements build && pnpm --filter @unlayer/react-elements build
+
+      # The walker against react-dom/server on random trees (useId()s included) and on random markup where templates
+      # have it, random templates against the last release, and the rest of the engine's tests (the self-check of an
+      # unknown React version among them).
+      - name: Fuzz
+        env:
+          WALKER_FUZZ_SEEDS: 5000
+          TEMPLATE_SEEDS: 1000
+          GENERATED_SEEDS: 3000
+        run: pnpm --filter @unlayer/react-elements exec vitest run src/engine src/regression/generated.test.tsx

.github/workflows/react-versions.yml

@@ -0,0 +1,69 @@
+# React versions
+#
+# Elements renders templates with its own renderer (src/engine), which must
+# render as each React it supports does: the react package's suite on each
+# one (its react and react-dom swapped in), in React's development build
+# (the full suite) and its production build (the engine's, the renderers'
+# and the regression tests: React's act(), which the component tests need,
+# is in its development build only). It holds the walker against
+# react-dom/server on hand-written and random trees, useId()s included
+# (src/engine/differential.test.tsx), React's react-server build with a
+# hook it lacks (src/regression/react-server-build.test.ts, React 19), and
+# a hook the dispatcher doesn't know (src/engine/dispatcher.test.tsx).
+#
+# A workflow of its own, called by test.yml (pushes and pull requests) and by
+# publish.yml, whose publish job waits for it: a release ships only a commit
+# every React passed. `github.sha` is the caller's, so it tests the commit the
+# caller tests or publishes.
+name: React versions
+
+on:
+  workflow_call:
+
+jobs:
+  react-versions:
+    name: React ${{ matrix.react }} (${{ matrix.build }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        react: ["18.0.0", "18.2.0", "18.3.1", "19.1", "19.2", "latest"]
+        build: [development, production]
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js 20
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9.7.0
+
+      - name: Authenticate npm registry
+        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.TEST_NPM_TOKEN }}" > ~/.npmrc
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Install React ${{ matrix.react }}
+        run: |
+          pnpm --filter @unlayer/react-elements add -D react@${{ matrix.react }} react-dom@${{ matrix.react }}
+          node -e "console.log('React', require('./packages/react/node_modules/react/package.json').version)"
+
+      - name: Build
+        run: pnpm --filter @unlayer-internal/shared-elements build && pnpm --filter @unlayer/react-elements build
+
+      - name: Tests (React's development build)
+        if: matrix.build == 'development'
+        run: pnpm --filter @unlayer/react-elements exec vitest run
+
+      - name: Tests (React's production build)
+        if: matrix.build == 'production'
+        env:
+          NODE_ENV: production
+        run: pnpm --filter @unlayer/react-elements exec vitest run src/engine src/async src/regression src/utils/render-errors.test.tsx src/utils/nested-renders.test.tsx --exclude src/regression/client-render.test.tsx