Prepare new release v0.13.0.

Author: ignatz

CHANGELOG.md

@@ -1,3 +1,21 @@
+## v0.13.0
+
+* Improve authentication and avatar handling (breaking).
+  * Remove avatar handling dependence on *special* `_user_avatar` record API by introducing dedicaed APIs.
+    This is a breaking change to the semantics of `/api/auth/v1/avatar*`, which
+    affects users of said APIs or `client.avatarUrl()`. Make sure to update to
+    the latest JS/TS client (v0.6).
+  * We also recommend removing the `_user_avatar` API definition from your `<traildepot>/config.textproto`.
+    It's inconsequential to have but no longer needed.
+  * Further, `/api/auth/v1/status` will now also refresh tokens thus not only
+    validating the auth token but also the session. The JS/TS client uses this to
+    asynchronously validate provided tokens.
+  * Allow deletion of avatars on `/_/auth/profile`. Also adopt nanostores to
+    manage client/user state on the profiles page.
+  * Add avatars back to admin UI.
+  * Document auth token lifecycle expectations when persisting tokens.
+* Update dependencies.
+
 ## v0.12.3
 
 * Fix row insertion/update in admin dashboard.

examples/blog/web/package.json

@@ -21,7 +21,7 @@
     "nanostores": "^1.0.1",
     "solid-icons": "^1.1.0",
     "solid-js": "^1.9.7",
-    "trailbase": "^0.5.1"
+    "trailbase": "workspace:*"
   },
   "devDependencies": {
     "@astrojs/solid-js": "^5.1.0",

pnpm-lock.yaml

@@ -1,7 +1,7 @@
 {
   "name": "trailbase",
   "description": "Official TrailBase Client",
-  "version": "0.5.1",
+  "version": "0.6.0",
   "license": "OSL-3.0",
   "type": "module",
   "main": "./src/index.ts",

trailbase-assets/js/client/package.json

@@ -84,7 +84,7 @@ pub fn pnpm_run(args: &[&str]) -> Result<std::process::Output> {
 
 pub fn build_js(path: impl AsRef<Path>) -> Result<()> {
   let path = path.as_ref().to_string_lossy().to_string();
-  let offline: bool = matches!(
+  let strict_offline: bool = matches!(
     std::env::var("PNPM_OFFLINE").as_deref(),
     Ok("TRUE") | Ok("true") | Ok("1")
   );
@@ -100,16 +100,16 @@ pub fn build_js(path: impl AsRef<Path>) -> Result<()> {
     // parallel installs in the past. Our current approach is to recommend installing workspace
     // JS deps upfront in combination with `--prefer-offline`. We used to use plain `--offline`,
     // however this adds an extra mandatory step when vendoring trailbase for framework use-cases.
-    let args = if offline {
+    let args = if strict_offline {
+      ["--dir", &path, "install", "--frozen-lockfile", "--offline"]
+    } else {
       [
         "--dir",
         &path,
         "install",
         "--prefer-frozen-lockfile",
         "--prefer-offline",
       ]
-    } else {
-      ["--dir", &path, "install", "--frozen-lockfile", "--offline"]
     };
     let build_result = pnpm_run(&args);
     if build_result.is_err() {