73dccaa00b21

fix: include crypto-core in the AMO source archive (PB-26-004) — both release scripts ship Cargo sources and the noise-core build script so reviewers can rebuild the WASM, excluding target and generated build output; archive contents verified; bump 5.0.3→5.0.4

time
2026-08-30 00:00 UTC · 1 month ago
machine
koh2
agent
glm-5.3-flash
session
pb-26 audit fixes
parent
06ca6237835c
5 files manifest.firefox.json+1 −1manifest.json+1 −1package.json+1 −1scripts/release-firefox.ts+6 −0scripts/release.ts+6 −0
manifest.firefox.json+1 −1
@@ -1,7 +1,7 @@11 {22   "manifest_version": 3,33   "name": "Peach Password Manager",4-  "version": "5.0.3",4+  "version": "5.0.4",55   "description": "Zero-knowledge password manager",66   "browser_specific_settings": {77     "gecko": {

view file

manifest.json+1 −1
@@ -2,7 +2,7 @@22   "manifest_version": 3,33   "minimum_chrome_version": "116",44   "name": "Peach Password Manager",5-  "version": "5.0.3",5+  "version": "5.0.4",66   "description": "Zero-knowledge password manager",77   "action": {88     "default_popup": "src/popup/index.html",

view file

package.json+1 −1
@@ -1,6 +1,6 @@11 {22   "name": "peach",3-  "version": "5.0.3",3+  "version": "5.0.4",44   "description": "Zero-knowledge password manager",55   "license": "GPL-3.0-only",66   "type": "module",

view file

scripts/release-firefox.ts+6 −0
@@ -58,6 +58,10 @@5858     "src",5959     "scripts",6060     "public",61+    // PB-26-004: the shipped .wasm is transpiled from crypto-core/src/lib.rs —62+    // AMO reviewers must be able to inspect and rebuild it (npm run63+    // build:noise-core). Build cache and generated output are excluded.64+    "crypto-core",6165     "manifest.json",6266     "manifest.firefox.json",6367     "package.json",@@ -66,6 +70,8 @@6670     "vite.config.ts",6771     "--exclude 'node_modules/*'",6872     "--exclude 'dist-*/*'",73+    "--exclude 'crypto-core/target/*'",74+    "--exclude 'crypto-core/generated/*'",6975     "--exclude '*.zip'",7076     "--exclude '.DS_Store'",7177     "--exclude '__MACOSX/*'",

view file

scripts/release.ts+6 −0
@@ -142,6 +142,10 @@142142       "src",143143       "scripts",144144       "public",145+      // PB-26-004: the shipped .wasm is transpiled from crypto-core/src/lib.rs146+      // — AMO reviewers must be able to inspect and rebuild it (npm run147+      // build:noise-core). Build cache and generated output are excluded.148+      "crypto-core",145149       "manifest.json",146150       "manifest.firefox.json",147151       "package.json",@@ -150,6 +154,8 @@150154       "vite.config.ts",151155       "--exclude 'node_modules/*'",152156       "--exclude 'dist-*/*'",157+      "--exclude 'crypto-core/target/*'",158+      "--exclude 'crypto-core/generated/*'",153159       "--exclude '*.zip'",154160       "--exclude '.DS_Store'",155161       "--exclude '__MACOSX/*'",

view file