Skip to content

v0.5.0: merge develop into main#10

Merged
wrxck merged 8 commits intomainfrom
develop
Feb 11, 2026
Merged

v0.5.0: merge develop into main#10
wrxck merged 8 commits intomainfrom
develop

Conversation

@wrxck
Copy link
Owner

@wrxck wrxck commented Feb 11, 2026

Summary

  • Merge develop into main for v0.5.0 release
  • <test> block support with new @matthesketh/utopia-test package
  • llms.md AI agent reference
  • Security hardening (regex constants, MCP validation, input sanitization)

Release

Matt Hesketh and others added 8 commits February 11, 2026 19:38
…ate inputs

- Extract every inline regex across all 10 packages to named exported
  constants with descriptive names and JSDoc comments
- MCP handler: make CORS origin configurable via MCPHandlerOptions,
  sanitize error responses to prevent information leakage
- Router: validate hash fragments against VALID_DOM_ID_RE before
  passing to getElementById
- Form validation: add RFC 5321 max email length check (254 chars)
  before regex test to mitigate ReDoS on long inputs
- Deduplicate shared patterns (HTML_TAG_RE, escape regexes)
- Reset lastIndex on shared global regexes to prevent stale state
- All 590 tests pass, lint clean, format clean, build clean
security: extract all regexes to constants, harden MCP handler, validate inputs
…e, and llms.md

- Parser: recognize <test> blocks in .utopia SFCs (parsed but ignored by compiler)
- New package: @matthesketh/utopia-test with mount(), render(), fireEvent, nextTick
- Vitest plugin: extracts <test> blocks into .utopia.test.ts files (only under VITEST env)
- CLI: add `utopia test` command wrapping vitest with auto-injected plugin
- Vite plugin: skip HMR refresh when only <test> block changes
- llms.md: comprehensive LLM reference with verified framework comparisons
- README: updated with test package, AI agent guidance, llms.md link
- Config: vitest aliases, tsconfig paths, .gitignore for generated test files
- Templates: create-utopia scaffold includes test deps and example <test> block
- 23 new tests (19 in test package, 4 in compiler), 613 total passing
Combine test block support (BLOCK_RE includes 'test', type assertion
includes 'test') with security audit changes (extracted regex constants,
lastIndex resets).
feat(test): add <test> block support and llms.md
@wrxck wrxck merged commit b63b896 into main Feb 11, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant