build(deps): bump emdash from 0.30.0 to 0.35.0

[dependabot]

Bumps emdash from 0.30.0 to 0.35.0.

Release notes

Sourced from emdash's releases.

emdash@0.35.0

Minor Changes

• #2438 0aa1bc8 Thanks @​ascorbic! - Adds emdash migrate for checking, reporting, and safely applying the exact core migration set recorded by a deployment build.

• #2437 34336e1 Thanks @​ascorbic! - Adds deployment-managed core migrations so production databases can be updated before a new version of the site starts serving traffic.

  To adopt the workflow, build the site, inspect and apply its migrations with emdash migrate, deploy that same build, then run emdash migrate --check to verify the database. Existing sites continue applying migrations automatically by default; switch the runtime to check only after the deployment migration job is reliable.

  Follow Manage Core Database Migrations for setup, credentials, target confirmation, CI configuration, and rollout guidance.

• #2437 34336e1 Thanks @​ascorbic! - Adds public migration identity and exact-status APIs so deployment tooling can verify and run the same core migration set as the installed EmDash version.

• #2437 34336e1 Thanks @​ascorbic! - Adds deployment migration executors for the built-in SQLite, libSQL, and PostgreSQL database adapters with secret-free build metadata.

• #2437 34336e1 Thanks @​ascorbic! - Adds auto, check, and manual runtime migration modes so deployments can verify or manage core database migrations before application traffic while existing sites remain on automatic migrations by default.

Patch Changes

• #2552 2c30503 Thanks @​ascorbic! - Fixes intermittent logged-out bounces immediately after login, signup, or invite acceptance on D1 and Durable Object databases with read replication enabled. The request that establishes the session now persists its read-replica bookmark, so the next request sees the newly created user instead of querying a replica that hasn't caught up yet.

• Updated dependencies [ffaadc4]:

  • @​emdash-cms/admin@​0.35.0
  • @​emdash-cms/auth@​0.35.0
  • @​emdash-cms/gutenberg-to-portable-text@​0.35.0

emdash@0.34.0

Minor Changes

• #2354 a9ace36 Thanks @​masonjames! - Adds MCP tools for safely updating collections and fields without deleting and recreating their schemas.

• #2187 6a77862 Thanks @​logelog! - Add a trusted plugin extension point for contributing isolated, host-framed panels to the saved content editor settings sidebar. Panels support collection and role filtering, deterministic ordering, manifest lifecycle checks, and render-error recovery.

• #1973 5224b57 Thanks @​CacheMeOwside! - Adds titleField and dateField optional collection options to choose which field is used as an entry's title and which date the content list shows and sorts by.

• #2194 2d5fb0b Thanks @​logelog! - Adds collection-configured custom field columns to admin content lists. Collection seeds and schema APIs can declare up to four supported fields through admin.listColumns; EmDash validates them when building the manifest and renders their stored values between the title and status columns.

• #2342 f8a4fce Thanks @​fbartolitsch! - Fixes localized taxonomy navigation and editor choices so each admin surface follows the active content locale. Public taxonomy helpers now report visible term counts for the active content locale instead of combining assignments across translations.

• #2213 e5cda04 Thanks @​logelog! - Adds server-side filtering for indexed custom fields through the REST client and plugin content list APIs.

• #2212 fefb702 Thanks @​logelog! - Adds opt-in database indexes for scalar custom fields and stable cursor pagination when ordering content lists by those fields.

• #2499 1c4d4f0 Thanks @​ascorbic! - Adds middleware.outer configuration for returning responses before EmDash initializes and finalizing fully mutated responses after rendering.

• #1947 8313255 Thanks @​swissky! - Adds the authenticated caller to plugin route handlers. Private plugin API routes now receive the requesting user as ctx.user (native format) / routeCtx.user (standard format) — { id, email, name, role, createdAt } — so plugins can implement per-user logic without trusting a user id from the request body. Public routes and machine tokens with no bound user receive undefined.

• #2469 ef32567 Thanks @​helio-cf! - Generates precise TypeScript types for repeater fields. Type generation emitted unknown for every repeater, so consuming code had to declare row shapes by hand and cast to them. It now emits an inline row type built from the field's sub-fields, with enumerated options for a select sub-field and the media object shape for an image sub-field. A sub-field that is not required is typed as nullable, matching what content validation accepts, and a repeater with no sub-fields still emits unknown.

  Regenerate types after upgrading. Code that casts a repeater to a hand-written row type may now report errors where that type has drifted from the schema.

... (truncated)

Changelog

Sourced from emdash's changelog.

0.35.0

Minor Changes

• #2438 0aa1bc8 Thanks @​ascorbic! - Adds emdash migrate for checking, reporting, and safely applying the exact core migration set recorded by a deployment build.

• #2437 34336e1 Thanks @​ascorbic! - Adds deployment-managed core migrations so production databases can be updated before a new version of the site starts serving traffic.

  To adopt the workflow, build the site, inspect and apply its migrations with emdash migrate, deploy that same build, then run emdash migrate --check to verify the database. Existing sites continue applying migrations automatically by default; switch the runtime to check only after the deployment migration job is reliable.

  Follow Manage Core Database Migrations for setup, credentials, target confirmation, CI configuration, and rollout guidance.

• #2437 34336e1 Thanks @​ascorbic! - Adds public migration identity and exact-status APIs so deployment tooling can verify and run the same core migration set as the installed EmDash version.

• #2437 34336e1 Thanks @​ascorbic! - Adds deployment migration executors for the built-in SQLite, libSQL, and PostgreSQL database adapters with secret-free build metadata.

• #2437 34336e1 Thanks @​ascorbic! - Adds auto, check, and manual runtime migration modes so deployments can verify or manage core database migrations before application traffic while existing sites remain on automatic migrations by default.

Patch Changes

• #2552 2c30503 Thanks @​ascorbic! - Fixes intermittent logged-out bounces immediately after login, signup, or invite acceptance on D1 and Durable Object databases with read replication enabled. The request that establishes the session now persists its read-replica bookmark, so the next request sees the newly created user instead of querying a replica that hasn't caught up yet.

• Updated dependencies [ffaadc4]:

  • @​emdash-cms/admin@​0.35.0
  • @​emdash-cms/auth@​0.35.0
  • @​emdash-cms/gutenberg-to-portable-text@​0.35.0

0.34.0

Minor Changes

• #2354 a9ace36 Thanks @​masonjames! - Adds MCP tools for safely updating collections and fields without deleting and recreating their schemas.

• #2187 6a77862 Thanks @​logelog! - Add a trusted plugin extension point for contributing isolated, host-framed panels to the saved content editor settings sidebar. Panels support collection and role filtering, deterministic ordering, manifest lifecycle checks, and render-error recovery.

• #1973 5224b57 Thanks @​CacheMeOwside! - Adds titleField and dateField optional collection options to choose which field is used as an entry's title and which date the content list shows and sorts by.

• #2194 2d5fb0b Thanks @​logelog! - Adds collection-configured custom field columns to admin content lists. Collection seeds and schema APIs can declare up to four supported fields through admin.listColumns; EmDash validates them when building the manifest and renders their stored values between the title and status columns.

• #2342 f8a4fce Thanks @​fbartolitsch! - Fixes localized taxonomy navigation and editor choices so each admin surface follows the active content locale. Public taxonomy helpers now report visible term counts for the active content locale instead of combining assignments across translations.

• #2213 e5cda04 Thanks @​logelog! - Adds server-side filtering for indexed custom fields through the REST client and plugin content list APIs.

• #2212 fefb702 Thanks @​logelog! - Adds opt-in database indexes for scalar custom fields and stable cursor pagination when ordering content lists by those fields.

• #2499 1c4d4f0 Thanks @​ascorbic! - Adds middleware.outer configuration for returning responses before EmDash initializes and finalizing fully mutated responses after rendering.

• #1947 8313255 Thanks @​swissky! - Adds the authenticated caller to plugin route handlers. Private plugin API routes now receive the requesting user as ctx.user (native format) / routeCtx.user (standard format) — { id, email, name, role, createdAt } — so plugins can implement per-user logic without trusting a user id from the request body. Public routes and machine tokens with no bound user receive undefined.

• #2469 ef32567 Thanks @​helio-cf! - Generates precise TypeScript types for repeater fields. Type generation emitted unknown for every repeater, so consuming code had to declare row shapes by hand and cast to them. It now emits an inline row type built from the field's sub-fields, with enumerated options for a select sub-field and the media object shape for an image sub-field. A sub-field that is not required is typed as nullable, matching what content validation accepts, and a repeater with no sub-fields still emits unknown.

... (truncated)

Commits

• 3c99225 ci: release (#2544)
• ade23cd test(core): stabilize migration signal cleanup (#2569)
• 2c30503 fix: persist read-replica bookmark when a request becomes authenticated (#2552)
• 0aa1bc8 Add emdash migrate command (#2438)
• 34336e1 Add deployment-managed core migration primitives (#2437)
• 4c3edad ci: release (#2419)
• ef32567 fix(core): generate row types for repeater fields (#2469)
• f8a4fce fix(taxonomies): respect active locale in admin surfaces (#2342)
• 5c216c2 fix: preserve taxonomy assignments across locale fallbacks (#2508)
• 5289385 fix: generate inline taxonomy slugs server-side (#2506)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)