From b178d729457d9adf2ce6415c5abf54b3aaae90b9 Mon Sep 17 00:00:00 2001
From: Amit Narwal <amit@arcwright.studio>
Date: Thu, 22 Oct 2026 15:41:06 +0530
Subject: [PATCH 1/2] Prepare 1.2.0

- Version 1.2.0, its changelog entry, and the CDN pins and integrity hashes of its files in the README, llms.txt and the example.
- The pin check covers every CDN address of the package, so the one in llms.txt can no longer fall behind.
- Test workers start without NO_COLOR, which Node warned about beside the FORCE_COLOR Playwright gives every worker.

Signed-off-by: Amit Narwal <amit@arcwright.studio>
---
 CHANGELOG.md              |  2 +-
 README.md                 |  6 +++---
 examples/html/index.html  |  4 ++--
 llms.txt                  |  2 +-
 package-lock.json         |  4 ++--
 package.json              |  2 +-
 playwright.config.ts      |  4 ++++
 scripts/check-example.mjs | 20 +++++++++++++++++---
 8 files changed, 31 insertions(+), 13 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index bfeffb1..f6546d2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,7 +2,7 @@
 
 Svifa follows [semantic versioning](https://semver.org).
 
-## Unreleased
+## 1.2.0
 
 ### Added
 
diff --git a/README.md b/README.md
index 0a41874..00cbc28 100644
--- a/README.md
+++ b/README.md
@@ -70,7 +70,7 @@ imports it as published, Yarn's Plug'n'Play mode included.
 Or load the script build, which sets `window.Svifa`:
 
 ```html
-<script src="https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.1.0/dist/svifa.global.min.js" integrity="sha384-qKb8HGrSvPlPYWa82GEkPwHwfWHPnLTgRQEbT9FTWXv65mbh9DIDVIlMgCtLt50X" crossorigin="anonymous"></script>
+<script src="https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.2.0/dist/svifa.global.min.js" integrity="sha384-Cvbx0AtzHAYXN/83k5dga5GIWLE56mbxDTK87Hk3OdpWBtLbcH3kYCymXOMyyIaC" crossorigin="anonymous"></script>
 ```
 
 Pin the exact version in the address, as here: the `integrity` hash then makes the browser refuse any file that differs from the
@@ -364,8 +364,8 @@ each page as it comes in. A script reaches the page's Svifa through the hidden e
 ### A plain page
 
 ```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.1.0/svifa.css" integrity="sha384-otF4Jeb3ig0lwx4TPg07EA4DX21Rv2bYdenWzivt0s9iF/itD6ESvFkAKjyNPwyE" crossorigin="anonymous" />
-<script src="https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.1.0/dist/svifa.global.min.js" integrity="sha384-qKb8HGrSvPlPYWa82GEkPwHwfWHPnLTgRQEbT9FTWXv65mbh9DIDVIlMgCtLt50X" crossorigin="anonymous"></script>
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.2.0/svifa.css" integrity="sha384-otF4Jeb3ig0lwx4TPg07EA4DX21Rv2bYdenWzivt0s9iF/itD6ESvFkAKjyNPwyE" crossorigin="anonymous" />
+<script src="https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.2.0/dist/svifa.global.min.js" integrity="sha384-Cvbx0AtzHAYXN/83k5dga5GIWLE56mbxDTK87Hk3OdpWBtLbcH3kYCymXOMyyIaC" crossorigin="anonymous"></script>
 <script>
   const svifa = new Svifa()
 </script>
diff --git a/examples/html/index.html b/examples/html/index.html
index 0af82d9..54a1007 100644
--- a/examples/html/index.html
+++ b/examples/html/index.html
@@ -7,7 +7,7 @@
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Svifa on a plain page</title>
-    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.1.0/svifa.css" integrity="sha384-otF4Jeb3ig0lwx4TPg07EA4DX21Rv2bYdenWzivt0s9iF/itD6ESvFkAKjyNPwyE" crossorigin="anonymous" />
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.2.0/svifa.css" integrity="sha384-otF4Jeb3ig0lwx4TPg07EA4DX21Rv2bYdenWzivt0s9iF/itD6ESvFkAKjyNPwyE" crossorigin="anonymous" />
     <style>
       :root {
         --paper: #ffffff;
@@ -122,7 +122,7 @@ <h2>Between pixels</h2>
         <p>Scroll slowly and watch the text: it moves evenly to the end, with no one-pixel hops as it settles.</p>
       </section>
     </main>
-    <script src="https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.1.0/dist/svifa.global.min.js" integrity="sha384-qKb8HGrSvPlPYWa82GEkPwHwfWHPnLTgRQEbT9FTWXv65mbh9DIDVIlMgCtLt50X" crossorigin="anonymous"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.2.0/dist/svifa.global.min.js" integrity="sha384-Cvbx0AtzHAYXN/83k5dga5GIWLE56mbxDTK87Hk3OdpWBtLbcH3kYCymXOMyyIaC" crossorigin="anonymous"></script>
     <script>
       // The page glides, and so do same-page links, stopping below the sticky header.
       const svifa = new Svifa({ subpixel: 'main > section', anchors: { offset: -56 } })
diff --git a/llms.txt b/llms.txt
index 5609e2e..17af545 100644
--- a/llms.txt
+++ b/llms.txt
@@ -12,7 +12,7 @@ This file is the complete reference for writing code that uses Svifa. The README
 
 npm install @arcwrightstudio/svifa (or pnpm add, yarn add, bun add, deno add npm:@arcwrightstudio/svifa)
 
-Script tag: https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.1.0/dist/svifa.global.min.js sets window.Svifa.
+Script tag: https://cdn.jsdelivr.net/npm/@arcwrightstudio/svifa@1.2.0/dist/svifa.global.min.js sets window.Svifa.
 
 ## Rules that matter
 
diff --git a/package-lock.json b/package-lock.json
index b554051..7afd11c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@arcwrightstudio/svifa",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@arcwrightstudio/svifa",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "license": "MIT",
       "devDependencies": {
         "@angular/common": "22.2.3",
diff --git a/package.json b/package.json
index ad4f07f..cc6776d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@arcwrightstudio/svifa",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "A smooth scroll library for the page or any scrolling element: the same feel at every refresh rate, drawn between pixels, and out of the way of everything else.",
   "keywords": [
     "angular",
diff --git a/playwright.config.ts b/playwright.config.ts
index aaf4c23..b7802f4 100644
--- a/playwright.config.ts
+++ b/playwright.config.ts
@@ -8,6 +8,10 @@ import { defineConfig, devices } from '@playwright/test'
 // (@not-webkit). The package's own tests use no browser, so they run once.
 const CHROMIUM_ONLY = ['**/scrollbars.spec.ts', '**/package.spec.ts', '**/server.spec.ts']
 
+// Playwright starts every worker with FORCE_COLOR set, and Node warns in each one that also inherits a NO_COLOR. The runner has
+// already read NO_COLOR for its own output by the time it reads this file, so the workers are started without it.
+delete process.env.NO_COLOR
+
 export default defineConfig({
   testDir: 'tests',
   fullyParallel: true,
diff --git a/scripts/check-example.mjs b/scripts/check-example.mjs
index d83f676..df19c8f 100644
--- a/scripts/check-example.mjs
+++ b/scripts/check-example.mjs
@@ -4,7 +4,8 @@
 // The plain-page example and the README load Svifa from jsDelivr, pinned to a version and to the files' integrity hashes. This
 // checks that they pin the version in package.json, and that each hash is the hash of the file that version serves: the published
 // file once the version is on npm (between releases, while the source changes), this build's file while it is not (a release
-// being prepared, so the tags work the moment it is published). Run after the build. usage: node scripts/check-example.mjs [--write]
+// being prepared, so the tags work the moment it is published). Every other address of the package on the CDN, as llms.txt gives
+// one, pins that version too. Run after the build. usage: node scripts/check-example.mjs [--write]
 // --write puts this version and those hashes into them.
 import { createHash } from 'node:crypto'
 import { readFileSync, writeFileSync } from 'node:fs'
@@ -75,12 +76,25 @@ for (const place of ['examples/html/index.html', 'README.md']) {
 }
 if (found === 0) problems.push('the example and the README load nothing from the CDN')
 
+// every address of the package on the CDN, inside a tag or not, pins this version
+const address = /https:\/\/cdn\.jsdelivr\.net\/npm\/(@?[^@"\s]+)@([^/"\s]+)\//g
+for (const place of ['README.md', 'llms.txt', 'examples/html/index.html']) {
+  const path = `${root}${place}`
+  const text = readFileSync(path, 'utf8').replace(address, (whole, pkg, pinned) => {
+    if (pkg !== name || pinned === version) return whole
+    if (write) return whole.replace(`@${pinned}/`, `@${version}/`)
+    problems.push(`${place}: an address pins ${pinned}, but package.json is at ${version}`)
+    return whole
+  })
+  if (write) writeFileSync(path, text)
+}
+
 const source = files ? `the files of ${version} as published` : `this build's files (${version} is not published yet)`
 if (write) {
-  console.log(`the example and the README now pin ${name}@${version} and the hashes of ${source}`)
+  console.log(`the example, the README and llms.txt now pin ${name}@${version}, with the hashes of ${source}`)
 } else if (problems.length) {
   console.error(problems.join('\n'))
   process.exit(1)
 } else {
-  console.log(`the example and the README pin ${name}@${version}, and their ${found} hashes are those of ${source}`)
+  console.log(`the example, the README and llms.txt pin ${name}@${version}, and the ${found} hashes are those of ${source}`)
 }

From 15c66f345529c797ce29aaf8745150cd24d1ab29 Mon Sep 17 00:00:00 2001
From: Amit Narwal <amit@arcwright.studio>
Date: Thu, 22 Oct 2026 15:42:54 +0530
Subject: [PATCH 2/2] Keep the Angular example's TypeScript within what Angular
 builds with

- The Angular example has a Dependabot entry of its own: TypeScript takes patch releases only, and moves with Angular.
- Node's types stay on a long-term support line in the examples, as in the package itself.

Signed-off-by: Amit Narwal <amit@arcwright.studio>
---
 .github/dependabot.yml | 33 ++++++++++++++++++++++-----------
 1 file changed, 22 insertions(+), 11 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a019204..439daa6 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -29,17 +29,7 @@ updates:
     labels: [dependencies]
 
   - package-ecosystem: npm
-    directories:
-      [
-        /examples/vite,
-        /examples/next,
-        /examples/vue,
-        /examples/nuxt,
-        /examples/sveltekit,
-        /examples/solid,
-        /examples/angular,
-        /examples/astro,
-      ]
+    directories: [/examples/vite, /examples/next, /examples/vue, /examples/nuxt, /examples/sveltekit, /examples/solid, /examples/astro]
     schedule:
       interval: monthly
     cooldown:
@@ -47,4 +37,25 @@ updates:
     groups:
       examples:
         patterns: ['*']
+    ignore:
+      # Node's types stay on a long-term support line, as above
+      - dependency-name: '@types/node'
+        update-types: [version-update:semver-major]
+    labels: [dependencies]
+
+  # Each Angular release names the TypeScript versions it builds with, so the Angular example's TypeScript moves with Angular
+  - package-ecosystem: npm
+    directory: /examples/angular
+    schedule:
+      interval: monthly
+    cooldown:
+      default-days: 7
+    groups:
+      angular-example:
+        patterns: ['*']
+    ignore:
+      - dependency-name: '@types/node'
+        update-types: [version-update:semver-major]
+      - dependency-name: typescript
+        update-types: [version-update:semver-major, version-update:semver-minor]
     labels: [dependencies]