Skip to content

[pull] next from umijs:next#39

Merged
pull[bot] merged 6 commits into
code:nextfrom
umijs:next
Jul 18, 2026
Merged

[pull] next from umijs:next#39
pull[bot] merged 6 commits into
code:nextfrom
umijs:next

Conversation

@pull

@pull pull Bot commented Jul 18, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

kuitos added 6 commits July 18, 2026 21:05
…ics (#3155)

* docs(rfc): add compartment alignment rfc for sandbox spec alignment

* refactor(sandbox): align Compartment global and classic-script semantics

* refactor(sandbox): drop diff-manifest constants, keep the list in the RFC

The COMPARTMENT_INTENTIONAL_OMISSIONS / COMPARTMENT_HOST_EXTENSIONS
exports only mirrored the RFC §5 diff list at runtime: HOST_EXTENSIONS
was a doc-only string array driving no logic, and the value of
INTENTIONAL_OMISSIONS lived entirely in a test assertion. Remove both
from the module surface; keep the negative 'evaluate/harden/lockdown in
compartment === false' guard by inlining the array in the test, and make
the RFC the single source of truth for the diff list.
* feat(sandbox): align Compartment module loading

* perf(sandbox): add Compartment alignment regression benchmark
…3160)

* feat(qiankun): expose compartment sandbox configuration and plugins

* docs(qiankun): document sandbox plugins and unified configuration

* test(e2e): cover compartment sandbox plugins
* docs(rfc): define standalone sandbox contract

* feat(sandbox): expose standalone sandbox controller

* fix(sandbox): scope container preparation to the container-backed preset

- The JS-only preset no longer mutates an element passed to mount():
  data-name and <qiankun-head> preparation belong to the container-backed
  preset only, in both the mount path and the controller nodeTransformer.
- Drop the redundant head-ensure call in the dynamicAppend plugin mount:
  it discarded the returned cleanup, so a head created there could never
  be released. Head auto-creation is owned solely by createSandbox mount,
  whose cleanups are tracked and freed on dispose.
- Replace the qiankun-head string literal with the qiankunHeadTagName
  constant, throw QiankunError instead of TypeError for the
  styleIsolation-without-container misconfiguration, and restore the
  styleIsolation JSDoc lost when SandboxConfiguration became a Pick of
  CreateSandboxOptions.
* docs(rfc): define standalone sandbox contract

* feat(sandbox): expose standalone sandbox controller

* feat(example): add standalone sandbox example

* docs(sandbox): add standalone sandbox guides

* test(e2e): verify standalone sandbox under CSP
@pull pull Bot locked and limited conversation to collaborators Jul 18, 2026
@pull pull Bot added the ⤵️ pull label Jul 18, 2026
@pull
pull Bot merged commit 412b1bd into code:next Jul 18, 2026
6 checks passed
@pull
pull Bot deployed to changeset-release July 18, 2026 18:43 Active
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant