Publish packages 🚀

examples/custom-element/CHANGELOG.md

@@ -1,5 +1,12 @@
 # example-custom-element
 
+## 0.0.26
+
+### Patch Changes
+
+- Updated dependencies [[`f20f6e7`](https://github.com/Shopify/remote-dom/commit/f20f6e75cbd20d673cb32b76f582e0199055d27d)]:
+  - @remote-dom/core@1.11.1
+
 ## 0.0.25
 
 ### Patch Changes

examples/custom-element/package.json

@@ -1,6 +1,6 @@
 {
   "name": "example-custom-element",
-  "version": "0.0.25",
+  "version": "0.0.26",
   "type": "module",
   "private": true,
   "scripts": {

examples/getting-started/CHANGELOG.md

@@ -1,5 +1,12 @@
 # example-getting-started
 
+## 0.0.26
+
+### Patch Changes
+
+- Updated dependencies [[`f20f6e7`](https://github.com/Shopify/remote-dom/commit/f20f6e75cbd20d673cb32b76f582e0199055d27d)]:
+  - @remote-dom/core@1.11.1
+
 ## 0.0.25
 
 ### Patch Changes

examples/getting-started/package.json

@@ -1,6 +1,6 @@
 {
   "name": "example-getting-started",
-  "version": "0.0.25",
+  "version": "0.0.26",
   "type": "module",
   "private": true,
   "scripts": {

examples/kitchen-sink/CHANGELOG.md

@@ -1,5 +1,13 @@
 # example-kitchen-sink
 
+## 0.0.33
+
+### Patch Changes
+
+- Updated dependencies [[`f20f6e7`](https://github.com/Shopify/remote-dom/commit/f20f6e75cbd20d673cb32b76f582e0199055d27d)]:
+  - @remote-dom/signals@2.1.1
+  - @remote-dom/core@1.11.1
+
 ## 0.0.32
 
 ### Patch Changes

examples/kitchen-sink/package.json

@@ -2,7 +2,7 @@
   "name": "example-kitchen-sink",
   "type": "module",
   "private": true,
-  "version": "0.0.32",
+  "version": "0.0.33",
   "scripts": {
     "start": "vite"
   },

packages/core/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @remote-dom/core
 
+## 1.11.1
+
+### Patch Changes
+
+- [#611](https://github.com/Shopify/remote-dom/pull/611) [`f20f6e7`](https://github.com/Shopify/remote-dom/commit/f20f6e75cbd20d673cb32b76f582e0199055d27d) Thanks [@eddiechan](https://github.com/eddiechan)! - Guard receivers against late mutations on detached nodes
+
+  `RemoteReceiver` and `SignalRemoteReceiver` now drop `insertChild`, `removeChild`, `updateProperty`, and `updateText` mutations whose target node is no longer in the receiver's `attached` map, instead of throwing a `TypeError` while dereferencing the missing node.
+
+  This race surfaces in production as unhandled promise rejections such as `TypeError: undefined is not an object (evaluating 'x.properties')` (Safari) / `TypeError: Cannot read properties of undefined (reading 'properties')` (V8) when a remote sender dispatches a mutation for a node whose host-side state has just been removed (for example, a `removeChild` for an ancestor was processed earlier in the same batch, or arrived first from a separate batched payload).
+
+  PR #533 previously added a similar guard to `removeChild` for the case where the _child slot_ at a given index was empty, but did not handle the case where the _parent itself_ was missing, and did not touch `updateProperty` or `updateText`. This change applies the same defensive pattern uniformly to every connection callback that dereferences `attached.get(id)`.
+
+  Late mutations targeting a detached subtree are by definition no-ops — there is nothing left to mutate.
+
 ## 1.11.0
 
 ### Minor Changes

packages/core/package.json

@@ -7,7 +7,7 @@
     "access": "public",
     "@remote-dom/registry": "https://registry.npmjs.org"
   },
-  "version": "1.11.0",
+  "version": "1.11.1",
   "engines": {
     "node": ">=14.0.0"
   },

packages/signals/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @remote-dom/signals
 
+## 2.1.1
+
+### Patch Changes
+
+- [#611](https://github.com/Shopify/remote-dom/pull/611) [`f20f6e7`](https://github.com/Shopify/remote-dom/commit/f20f6e75cbd20d673cb32b76f582e0199055d27d) Thanks [@eddiechan](https://github.com/eddiechan)! - Guard receivers against late mutations on detached nodes
+
+  `RemoteReceiver` and `SignalRemoteReceiver` now drop `insertChild`, `removeChild`, `updateProperty`, and `updateText` mutations whose target node is no longer in the receiver's `attached` map, instead of throwing a `TypeError` while dereferencing the missing node.
+
+  This race surfaces in production as unhandled promise rejections such as `TypeError: undefined is not an object (evaluating 'x.properties')` (Safari) / `TypeError: Cannot read properties of undefined (reading 'properties')` (V8) when a remote sender dispatches a mutation for a node whose host-side state has just been removed (for example, a `removeChild` for an ancestor was processed earlier in the same batch, or arrived first from a separate batched payload).
+
+  PR #533 previously added a similar guard to `removeChild` for the case where the _child slot_ at a given index was empty, but did not handle the case where the _parent itself_ was missing, and did not touch `updateProperty` or `updateText`. This change applies the same defensive pattern uniformly to every connection callback that dereferences `attached.get(id)`.
+
+  Late mutations targeting a detached subtree are by definition no-ops — there is nothing left to mutate.
+
+- Updated dependencies [[`f20f6e7`](https://github.com/Shopify/remote-dom/commit/f20f6e75cbd20d673cb32b76f582e0199055d27d)]:
+  - @remote-dom/core@1.11.1
+
 ## 2.1.0
 
 ### Minor Changes

packages/signals/package.json

@@ -6,7 +6,7 @@
     "access": "public",
     "@remote-dom/registry": "https://registry.npmjs.org"
   },
-  "version": "2.1.0",
+  "version": "2.1.1",
   "engines": {
     "node": ">=14.0.0"
   },
@@ -43,6 +43,6 @@
     "defaults and not dead"
   ],
   "dependencies": {
-    "@remote-dom/core": "workspace:^1.7.0"
+    "@remote-dom/core": "workspace:^1.11.1"
   }
 }