Merge/0.28.0

CHANGELOG.md

@@ -10,6 +10,15 @@
 ### Bugfixes
 
 -->
+## 0.28.0
+### Changes
+- We have added new restrictions during the parsing process to enhance security. While it is extremely rare, this may result in some highly complex MFM patterns failing to render.\
+  We have tested several common examples of "MFM art" under these new constraints and confirmed that they can still be parsed successfully.
+
+### Bugfixes
+- Update dependencies
+- Security fixes
+
 ## 0.27.0
 ### Bugfixes
 - Restore CLI commands that are accidentally removed in 0.26.0

package.json

@@ -1,10 +1,10 @@
 {
   "name": "mfc-js",
-  "version": "0.2.0",
-  "baseMfmJsVersion": "0.27.0",
+  "version": "0.3.0",
+  "baseMfmJsVersion": "0.28.0",
   "description": "An MFM parser implementation with TypeScript",
   "type": "module",
-  "packageManager": "pnpm@12.11.2",
+  "packageManager": "pnpm@12.14.0",
   "main": "./built/index.mjs",
   "types": "./built/index.d.ts",
   "exports": {
@@ -38,13 +38,13 @@
     "@misskey-dev/oxlint-fmt-config": "0.1.1",
     "@stylistic/eslint-plugin": "5.10.0",
     "@types/node": "26.6.5",
-    "@vitest/coverage-v8": "5.0.3",
-    "oxlint": "1.87.0",
+    "@vitest/coverage-v8": "5.0.5",
+    "oxlint": "1.88.0",
     "oxlint-tsgolint": "7.0.2004",
     "tsd": "0.33.0",
     "tsdown": "0.23.1",
     "typescript": "7.0.2",
-    "vitest": "5.0.3"
+    "vitest": "5.0.5"
   },
   "dependencies": {
     "@misskey-dev/emoji-data": "17.0.3"