ci: release

github-actions[bot] · github-actions[bot] · commit 67d6a968dd55 · 2026-05-22T11:06:19.000Z
diff --git a/.changeset/fine-tables-mix.md b/.changeset/fine-tables-mix.md
diff --git a/.changeset/registry-lifecycle.md b/.changeset/registry-lifecycle.md
diff --git a/fixtures/perf-site/CHANGELOG.md b/fixtures/perf-site/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @emdash-cms/fixture-perf-site
 
+## 0.0.11
+
+### Patch Changes
+
+- Updated dependencies [[`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61), [`9a30607`](https://github.com/emdash-cms/emdash/commit/9a30607791a2f27473b1d2fe7700291e0be1ea1c)]:
+  - emdash@0.15.0
+  - @emdash-cms/cloudflare@0.15.0
+
 ## 0.0.10
 
 ### Patch Changes
diff --git a/fixtures/perf-site/package.json b/fixtures/perf-site/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@emdash-cms/fixture-perf-site",
-	"version": "0.0.10",
+	"version": "0.0.11",
 	"private": true,
 	"type": "module",
 	"description": "Fixture site for query-count perf snapshots. Runs under sqlite+node or d1+cloudflare based on EMDASH_FIXTURE_TARGET.",
@@ -21,7 +21,7 @@
 		"astro": "catalog:",
 		"better-sqlite3": "catalog:",
 		"emdash": "workspace:*",
-    "kysely": "^0.29.0",
+		"kysely": "^0.29.0",
 		"react": "catalog:",
 		"react-dom": "catalog:"
 	},
diff --git a/infra/blog-demo/CHANGELOG.md b/infra/blog-demo/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @emdash-cms/perf-demo-site
 
+## 0.0.11
+
+### Patch Changes
+
+- Updated dependencies [[`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61), [`9a30607`](https://github.com/emdash-cms/emdash/commit/9a30607791a2f27473b1d2fe7700291e0be1ea1c)]:
+  - emdash@0.15.0
+  - @emdash-cms/cloudflare@0.15.0
+
 ## 0.0.10
 
 ### Patch Changes
diff --git a/infra/blog-demo/package.json b/infra/blog-demo/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@emdash-cms/perf-demo-site",
-	"version": "0.0.10",
+	"version": "0.0.11",
 	"private": true,
 	"type": "module",
 	"scripts": {
diff --git a/infra/cache-demo/CHANGELOG.md b/infra/cache-demo/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @emdash-cms/cache-demo-site
 
+## 0.0.11
+
+### Patch Changes
+
+- Updated dependencies [[`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61), [`9a30607`](https://github.com/emdash-cms/emdash/commit/9a30607791a2f27473b1d2fe7700291e0be1ea1c)]:
+  - emdash@0.15.0
+  - @emdash-cms/cloudflare@0.15.0
+
 ## 0.0.10
 
 ### Patch Changes
diff --git a/infra/cache-demo/package.json b/infra/cache-demo/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@emdash-cms/cache-demo-site",
-	"version": "0.0.10",
+	"version": "0.0.11",
 	"private": true,
 	"type": "module",
 	"scripts": {
diff --git a/packages/admin/CHANGELOG.md b/packages/admin/CHANGELOG.md
@@ -1,5 +1,20 @@
 # @emdash-cms/admin
 
+## 0.15.0
+
+### Minor Changes
+
+- [#1114](https://github.com/emdash-cms/emdash/pull/1114) [`9a30607`](https://github.com/emdash-cms/emdash/commit/9a30607791a2f27473b1d2fe7700291e0be1ea1c) Thanks [@ascorbic](https://github.com/ascorbic)! - Plugins installed from the experimental registry can now be uninstalled and updated from the admin, the same way marketplace plugins always could. The "uninstall is not yet available for registry plugins" placeholder is gone — registry plugin rows now show the same Uninstall and Update buttons.
+
+  The Plugins page's "updates available" indicator now covers registry plugins too. If the registry aggregator is unreachable, marketplace updates still load (and vice versa).
+
+  Updates that need newly-declared permissions, or that newly expose a public (unauthenticated) route, prompt for re-consent before installing the new version — matching the gate that marketplace updates already have.
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @emdash-cms/blocks@0.15.0
+
 ## 0.14.0
 
 ### Minor Changes
diff --git a/packages/admin/package.json b/packages/admin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emdash-cms/admin",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Admin UI for EmDash CMS",
   "type": "module",
   "main": "dist/index.js",
diff --git a/packages/auth-atproto/CHANGELOG.md b/packages/auth-atproto/CHANGELOG.md
@@ -1,5 +1,20 @@
 # @emdash-cms/auth-atproto
 
+## 0.2.8
+
+### Patch Changes
+
+- [#1139](https://github.com/emdash-cms/emdash/pull/1139) [`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61) Thanks [@ask-bonk](https://github.com/apps/ask-bonk)! - Upgrades `kysely` to `^0.29.0` (was `^0.27.0`) to resolve three high-severity advisories fixed in `>=0.28.17`:
+  - GHSA-wmrf-hv6w-mr66 – SQL injection via unsanitized JSON path keys
+  - GHSA-pv5w-4p9q-p3v2 – JSON-path traversal injection via `JSONPathBuilder.key()` / `.at()`
+  - GHSA-8cpq-38p9-67gx – MySQL SQL injection via `sql.lit(string)`
+
+  Also updates import paths for `Migrator` and `Migration` types to `kysely/migration` to comply with kysely 0.29 export changes.
+
+- Updated dependencies [[`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61), [`9a30607`](https://github.com/emdash-cms/emdash/commit/9a30607791a2f27473b1d2fe7700291e0be1ea1c)]:
+  - emdash@0.15.0
+  - @emdash-cms/auth@0.15.0
+
 ## 0.2.7
 
 ### Patch Changes
diff --git a/packages/auth-atproto/package.json b/packages/auth-atproto/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@emdash-cms/auth-atproto",
-	"version": "0.2.7",
+	"version": "0.2.8",
 	"description": "AT Protocol / Atmosphere authentication provider for EmDash CMS",
 	"type": "module",
 	"main": "src/auth.ts",
@@ -26,7 +26,7 @@
 	"license": "MIT",
 	"peerDependencies": {
 		"astro": ">=5",
-		"emdash": "workspace:>=0.14.0",
+		"emdash": "workspace:>=0.15.0",
 		"react": ">=18"
 	},
 	"devDependencies": {
@@ -48,6 +48,6 @@
 		"@atcute/identity-resolver": "^1.2.2",
 		"@atcute/oauth-node-client": "^1.1.0",
 		"@emdash-cms/auth": "workspace:*",
-    "kysely": "^0.29.0"
+		"kysely": "^0.29.0"
 	}
 }
diff --git a/packages/auth/CHANGELOG.md b/packages/auth/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @emdash-cms/auth
 
+## 0.15.0
+
+### Patch Changes
+
+- [#1139](https://github.com/emdash-cms/emdash/pull/1139) [`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61) Thanks [@ask-bonk](https://github.com/apps/ask-bonk)! - Upgrades `kysely` to `^0.29.0` (was `^0.27.0`) to resolve three high-severity advisories fixed in `>=0.28.17`:
+  - GHSA-wmrf-hv6w-mr66 – SQL injection via unsanitized JSON path keys
+  - GHSA-pv5w-4p9q-p3v2 – JSON-path traversal injection via `JSONPathBuilder.key()` / `.at()`
+  - GHSA-8cpq-38p9-67gx – MySQL SQL injection via `sql.lit(string)`
+
+  Also updates import paths for `Migrator` and `Migration` types to `kysely/migration` to comply with kysely 0.29 export changes.
+
 ## 0.14.0
 
 ## 0.13.0
diff --git a/packages/auth/package.json b/packages/auth/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emdash-cms/auth",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Passkey-first authentication for EmDash",
   "type": "module",
   "main": "dist/index.mjs",
diff --git a/packages/blocks/CHANGELOG.md b/packages/blocks/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @emdash-cms/blocks
 
+## 0.15.0
+
 ## 0.14.0
 
 ## 0.13.0
diff --git a/packages/blocks/package.json b/packages/blocks/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emdash-cms/blocks",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Declarative plugin UI blocks for EmDash CMS",
   "type": "module",
   "main": "dist/index.js",
diff --git a/packages/cloudflare/CHANGELOG.md b/packages/cloudflare/CHANGELOG.md
@@ -1,5 +1,19 @@
 # @emdash-cms/cloudflare
 
+## 0.15.0
+
+### Patch Changes
+
+- [#1139](https://github.com/emdash-cms/emdash/pull/1139) [`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61) Thanks [@ask-bonk](https://github.com/apps/ask-bonk)! - Upgrades `kysely` to `^0.29.0` (was `^0.27.0`) to resolve three high-severity advisories fixed in `>=0.28.17`:
+  - GHSA-wmrf-hv6w-mr66 – SQL injection via unsanitized JSON path keys
+  - GHSA-pv5w-4p9q-p3v2 – JSON-path traversal injection via `JSONPathBuilder.key()` / `.at()`
+  - GHSA-8cpq-38p9-67gx – MySQL SQL injection via `sql.lit(string)`
+
+  Also updates import paths for `Migrator` and `Migration` types to `kysely/migration` to comply with kysely 0.29 export changes.
+
+- Updated dependencies [[`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61), [`9a30607`](https://github.com/emdash-cms/emdash/commit/9a30607791a2f27473b1d2fe7700291e0be1ea1c)]:
+  - emdash@0.15.0
+
 ## 0.14.0
 
 ### Patch Changes
diff --git a/packages/cloudflare/package.json b/packages/cloudflare/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emdash-cms/cloudflare",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Cloudflare adapters for EmDash - D1, R2, Access, and Worker Loader sandbox",
   "type": "module",
   "main": "dist/index.mjs",
diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,30 @@
 # emdash
 
+## 0.15.0
+
+### Minor Changes
+
+- [#1114](https://github.com/emdash-cms/emdash/pull/1114) [`9a30607`](https://github.com/emdash-cms/emdash/commit/9a30607791a2f27473b1d2fe7700291e0be1ea1c) Thanks [@ascorbic](https://github.com/ascorbic)! - Plugins installed from the experimental registry can now be uninstalled and updated from the admin, the same way marketplace plugins always could. The "uninstall is not yet available for registry plugins" placeholder is gone — registry plugin rows now show the same Uninstall and Update buttons.
+
+  The Plugins page's "updates available" indicator now covers registry plugins too. If the registry aggregator is unreachable, marketplace updates still load (and vice versa).
+
+  Updates that need newly-declared permissions, or that newly expose a public (unauthenticated) route, prompt for re-consent before installing the new version — matching the gate that marketplace updates already have.
+
+### Patch Changes
+
+- [#1139](https://github.com/emdash-cms/emdash/pull/1139) [`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61) Thanks [@ask-bonk](https://github.com/apps/ask-bonk)! - Upgrades `kysely` to `^0.29.0` (was `^0.27.0`) to resolve three high-severity advisories fixed in `>=0.28.17`:
+  - GHSA-wmrf-hv6w-mr66 – SQL injection via unsanitized JSON path keys
+  - GHSA-pv5w-4p9q-p3v2 – JSON-path traversal injection via `JSONPathBuilder.key()` / `.at()`
+  - GHSA-8cpq-38p9-67gx – MySQL SQL injection via `sql.lit(string)`
+
+  Also updates import paths for `Migrator` and `Migration` types to `kysely/migration` to comply with kysely 0.29 export changes.
+
+- Updated dependencies [[`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61), [`9a30607`](https://github.com/emdash-cms/emdash/commit/9a30607791a2f27473b1d2fe7700291e0be1ea1c)]:
+  - @emdash-cms/auth@0.15.0
+  - @emdash-cms/auth-atproto@0.2.8
+  - @emdash-cms/admin@0.15.0
+  - @emdash-cms/gutenberg-to-portable-text@0.15.0
+
 ## 0.14.0
 
 ### Patch Changes
diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "emdash",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Astro-native CMS with WordPress migration support",
   "type": "module",
   "main": "dist/index.mjs",
@@ -239,7 +239,7 @@
   },
   "peerDependencies": {
     "@astrojs/react": ">=5.0.0-beta.0",
-    "@emdash-cms/auth-atproto": "workspace:>=0.2.7",
+    "@emdash-cms/auth-atproto": "workspace:>=0.2.8",
     "astro": ">=6.0.0-beta.0",
     "react": ">=18.0.0",
     "react-dom": ">=18.0.0"
diff --git a/packages/create-emdash/CHANGELOG.md b/packages/create-emdash/CHANGELOG.md
@@ -1,5 +1,7 @@
 # create-emdash
 
+## 0.15.0
+
 ## 0.14.0
 
 ### Patch Changes
diff --git a/packages/create-emdash/package.json b/packages/create-emdash/package.json
@@ -1,6 +1,6 @@
 {
   "name": "create-emdash",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Create a new EmDash CMS project",
   "type": "module",
   "bin": "./dist/index.mjs",
diff --git a/packages/gutenberg-to-portable-text/CHANGELOG.md b/packages/gutenberg-to-portable-text/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @emdash-cms/gutenberg-to-portable-text
 
+## 0.15.0
+
 ## 0.14.0
 
 ## 0.13.0
diff --git a/packages/gutenberg-to-portable-text/package.json b/packages/gutenberg-to-portable-text/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emdash-cms/gutenberg-to-portable-text",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Convert WordPress Gutenberg blocks to Portable Text",
   "type": "module",
   "main": "dist/index.mjs",
diff --git a/packages/plugins/api-test/package.json b/packages/plugins/api-test/package.json
@@ -22,7 +22,7 @@
 	"author": "Matt Kane",
 	"license": "MIT",
 	"peerDependencies": {
-		"emdash": "workspace:>=0.14.0",
+		"emdash": "workspace:>=0.15.0",
 		"react": "^18.0.0 || ^19.0.0",
 		"@phosphor-icons/react": "^2.1.10"
 	},
diff --git a/packages/plugins/embeds/CHANGELOG.md b/packages/plugins/embeds/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @emdash-cms/plugin-embeds
 
+## 0.1.16
+
+### Patch Changes
+
+- Updated dependencies [[`88f544d`](https://github.com/emdash-cms/emdash/commit/88f544db4b8e2f30060a3b4d670ff72aa8760d61), [`9a30607`](https://github.com/emdash-cms/emdash/commit/9a30607791a2f27473b1d2fe7700291e0be1ea1c)]:
+  - emdash@0.15.0
+  - @emdash-cms/blocks@0.15.0
+
 ## 0.1.15
 
 ### Patch Changes
diff --git a/packages/plugins/embeds/package.json b/packages/plugins/embeds/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@emdash-cms/plugin-embeds",
-	"version": "0.1.15",
+	"version": "0.1.16",
 	"description": "Embed blocks for EmDash CMS - YouTube, Vimeo, Twitter, Bluesky, Mastodon, and more",
 	"type": "module",
 	"main": "src/index.ts",
@@ -25,7 +25,7 @@
 	"license": "MIT",
 	"peerDependencies": {
 		"astro": ">=6.0.0-beta.0",
-		"emdash": "workspace:>=0.14.0"
+		"emdash": "workspace:>=0.15.0"
 	},
 	"dependencies": {
 		"@emdash-cms/blocks": "workspace:*",
diff --git a/packages/x402/CHANGELOG.md b/packages/x402/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @emdash-cms/x402
 
+## 0.15.0
+
 ## 0.14.0
 
 ## 0.13.0
diff --git a/packages/x402/package.json b/packages/x402/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@emdash-cms/x402",
-	"version": "0.14.0",
+	"version": "0.15.0",
 	"description": "x402 payment protocol integration for Astro sites",
 	"license": "MIT",
 	"repository": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@emdash-cms/perf-demo-site",`
`3`		`- "version": "0.0.10",`
	`3`	`+ "version": "0.0.11",`
`4`	`4`	`"private": true,`
`5`	`5`	`"type": "module",`
`6`	`6`	`"scripts": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@emdash-cms/cache-demo-site",`
`3`		`- "version": "0.0.10",`
	`3`	`+ "version": "0.0.11",`
`4`	`4`	`"private": true,`
`5`	`5`	`"type": "module",`
`6`	`6`	`"scripts": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@emdash-cms/admin",`
`3`		`- "version": "0.14.0",`
	`3`	`+ "version": "0.15.0",`
`4`	`4`	`"description": "Admin UI for EmDash CMS",`
`5`	`5`	`"type": "module",`
`6`	`6`	`"main": "dist/index.js",`