From 041df5239aabd426babe5d623b9d4285ae603d7f Mon Sep 17 00:00:00 2001 From: George Fean <37250288+GFean@users.noreply.github.com> Date: Sat, 22 Aug 2026 07:16:38 +0400 Subject: [PATCH 1/2] chore(main): release 0.6.0 --- .release-please-manifest.json | 2 +- CHANGELOG.md | 7 +++++++ package.json | 2 +- 3 files changed, 9 insertions(+), 2 deletions(-) diff --git a/.release-please-manifest.json b/.release-please-manifest.json index 210d290..bcd0522 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,3 +1,3 @@ { - ".": "0.5.1" + ".": "0.6.0" } diff --git a/CHANGELOG.md b/CHANGELOG.md index a50e577..7ac5f60 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,13 @@ All notable changes to this package are documented here. This project uses [Conventional Commits](https://www.conventionalcommits.org/) and [release-please](https://github.com/googleapis/release-please) to prepare releases. +## [0.6.0](https://github.com/GFean/react-native-bundle-drop/compare/v0.5.1...v0.6.0) (2026-08-22) + + +### Features + +* add managed runtime delivery and safer project setup ([#28](https://github.com/GFean/react-native-bundle-drop/issues/28)) ([cba0725](https://github.com/GFean/react-native-bundle-drop/commit/cba0725597a0938cdc641965735f4afb812b76a8)) + ## [0.5.1](https://github.com/GFean/react-native-bundle-drop/compare/v0.5.0...v0.5.1) (2026-08-09) diff --git a/package.json b/package.json index e8d3824..38bb872 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@gfean/react-native-bundle-drop", - "version": "0.5.1", + "version": "0.6.0", "nativeVersion": "0.5.0", "description": "Over-the-air updates for Expo and bare React Native apps, with channels, staged rollouts, patch delivery, and rollback.", "main": "lib/index.js", From f3a59bf085078604e2ce9374d47483907f9d74bd Mon Sep 17 00:00:00 2001 From: George Fean <37250288+GFean@users.noreply.github.com> Date: Sat, 22 Aug 2026 07:18:11 +0400 Subject: [PATCH 2/2] docs: expand 0.6.0 release notes --- CHANGELOG.md | 79 ++++++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 77 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 7ac5f60..d153f78 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,10 +7,85 @@ This project uses [Conventional Commits](https://www.conventionalcommits.org/) a ## [0.6.0](https://github.com/GFean/react-native-bundle-drop/compare/v0.5.1...v0.6.0) (2026-08-22) +### Managed Runtime Delivery and Safer Project Setup -### Features +This release makes managed runtime delivery the standard Bundle Drop path, strengthens native +verification and download safety, and substantially improves automated and manual project setup. + +#### Managed runtime delivery + +- Added signed, identity-bound runtime manifests and publisher authority leases. +- Added local manifest resolution for public rollout decisions. +- Private user-property targeting remains securely evaluated by the Bundle Drop resolver. +- Added fresh artifact authorization before managed downloads and patch application. +- Added revocation-aware rollback and safe native-bundle recovery. +- Added bounded manifest and artifact downloads, signature verification, generation checks, and + integrity validation. +- Added privacy-safe runtime delivery diagnostic counters. + +#### Simplified configuration + +- Added `bundle-drop sync` to generate or repair the public runtime trust bootstrap. +- Runtime delivery no longer requires a public mode/version flag. +- `bundle.drop.config.js` remains the project identity source and is safe to commit. +- `.bundle-drop/runtime-delivery.generated.json` contains public verification material and should + also be committed. +- Deleting the generated bootstrap is recoverable by running `bundle-drop sync`. +- Transient `.bundle-drop/generated/*` Metro files remain ignored and are recreated automatically. + +#### Safer setup and migrations + +- Improved automatic Expo and bare React Native project detection. +- Added strict startup-path validation for supported Android, Swift, and Objective-C React Native + templates. +- Improved CodePush and Expo Updates migration handling. +- Native and dynamic Expo configuration patches remain review-only. +- Added path, symlink, stale-hash, credential, and terminal-output protections. +- Ambiguous or unsupported project structures fail safely to documented manual setup. +- Expanded `bundle-drop doctor` validation and actionable diagnostics. +- Added a complete no-AI manual setup flow. + +#### Metro and Expo integration + +- Added package-managed Metro wrappers for bare React Native and Expo. +- Preserves supported existing Metro configuration and export flow. +- Improved Expo dynamic configuration preservation and plugin authority validation. +- Added safer dependency migration and prebuild rollback handling. + +#### Native runtime + +- Added native SHA-256 and ES256 verification support. +- Added bounded native download handling on Android and iOS. +- Strengthened native bundle selection, integrity checks, and rollback behavior. +- Native package revision is now `0.5.0`. + +#### Upgrade instructions + +1. Upgrade `@gfean/react-native-bundle-drop`. +2. If the package-managed Metro wrapper is not already installed, run: + + ```bash + npx bundle-drop init + ``` + +3. Generate or repair the public runtime trust bootstrap: + + ```bash + npx bundle-drop sync + ``` + +4. Commit `.bundle-drop/runtime-delivery.generated.json` with the project configuration. +5. Refresh CocoaPods or Expo prebuild as appropriate and ship a new native binary for native + package revision `0.5.0`. +6. Validate the completed setup: + + ```bash + npx bundle-drop doctor + ``` -* add managed runtime delivery and safer project setup ([#28](https://github.com/GFean/react-native-bundle-drop/issues/28)) ([cba0725](https://github.com/GFean/react-native-bundle-drop/commit/cba0725597a0938cdc641965735f4afb812b76a8)) +See [#28](https://github.com/GFean/react-native-bundle-drop/pull/28) and +[`cba0725`](https://github.com/GFean/react-native-bundle-drop/commit/cba0725597a0938cdc641965735f4afb812b76a8) +for the merged implementation. ## [0.5.1](https://github.com/GFean/react-native-bundle-drop/compare/v0.5.0...v0.5.1) (2026-08-09)