Releases: WhoopInc/frozen-moment
Security update + frozen durations
This release updates our package.json to depend on a newer version of Moment that does not suffer from a Denial of Service attack in the duration parser. We've also added a new constructor -- moment.frozen.duration() -- for creating durations with an immutable API (similar to how moment.frozen() is a wrapper over the moment() API).
Also: big news! I (@butterflyhug) have been spending less time on Frozen Moment recently because I'm working with Moment's maintainers to bring immutability to the core Moment library in the near future! The full technical proposal (with extended discussion) is available at moment/moment-rfcs#2 and you can expect to see me open an implementation PR against the moment/moment repo in the next couple weeks. This is a major migration for NPM's tenth most depended-upon package -- not to mention a large number of Moment users who don't use NPM -- so please help us make it a success!
Many thanks to @jscinoz, @eoftedal, and @waisbrot for contributing to this release.
Critical bugfix / Release candidate #2
Release candidate
This release adds IE 8 compatibility and features to help third-party plugins integrate with Frozen Moment. (Most Moment plugins are inherently compatible with Frozen Moment, since they do not mutate any moment instances. The new features are primarily intended for the minority of Moment plugins that do rely on Moment's mutability, e.g. to perform math on an explicitly cloned instance.)
There is one known incompatible change since 0.1.1:
- Cloning a frozen moment instance now returns a new frozen instance. Due to a bug, cloning a frozen instance previously returned a non-frozen instance. I do not anticipate that there is any code in the wild that directly relies on the old behavior, but it may impact compatibility with some third-party Moment plugins.
Special thanks to @pitaj for contributing to this release.
Documentation update
I forgot to push a quick update to the README before publishing the 0.1.0 release. Therefore, this release is the same as 0.1.0, except it has a slightly better README.
Initial preview release
This is the first release of Frozen Moment as a Moment plugin. It has been lightly tested, but should work as documented. Please report any bugs in our repository's GitHub issues. (Or send us a Pull Request with a fix!)
This initial preview release only supports browsers with certain ES5 features (Object.create, Array.indexOf). This includes recent releases of all major browsers, but Frozen Moment will not currently work with Firefox 3.6, IE 8, or Safari 4.
Special thanks to @wyantb for contributing to this release.