144 Commits
Author SHA1 Message Date
Lu Yifei a7c9e72b1c Merge origin/master and adapt specialized player integration
Integrate Packager 3.14.0, updated audio/render sources, preview isolation and escaping fixes. Adapt continuation temporaries and deserialized layer ordering, preserve frozen extension support, and align CI with master.
2026-11-08 14:28:15 +08:00
Lu Yifei 9f7b0df40e chore: migrate packager repository metadata to ScCNv5 2026-11-08 14:15:53 +08:00
Lu Yifei f7da05fc15 feat(protection): rename renderer internals and isolate Target state
Jointly rename the bundled renderer, Drawable and Skin methods and internal fields.
Use private Target state keys with prototype branding and receiver-aware access
adapters, preserving SB3 data loading, serialization, cloning and native objects.

Cover reflection, optional access, clone restart and renderer property mapping.
Run the aggressive CPU gate in CI and lengthen the pen benchmark workload.
2026-11-08 14:08:03 +08:00
Lu Yifei adeaa2bafd feat(protection): add optional aggressive VM property renaming
Expose aggressiveRenaming in the website and Node API with a default-off setting.
Extend the seeded mapping to VM methods, internal fields and core block packages.
Scope thread status separately from external response status and reserve native
platform properties. Add differential and browser coverage for the new mode.
2026-11-08 14:07:19 +08:00
Thomas Weber 6182902c41 3.14.0 2026-10-25 13:51:24 -05:00
Lu Yifei d5ebe6cb47 feat(protection): add program-specialized packager
Build offline specialized players from the matching Scratch VM, with audited linking, pruning and scheduling-property renaming across browser, Node and standalone outputs.
2026-09-25 19:47:33 +08:00
Lu Yifei 5dfdf70e4b feat: add compiled project protection and GitHub Pages deployment
- promote compiled packaging as a primary product feature
- add VM access and configurable JavaScript obfuscation
- support global debug protection and self-defending options
- package compiled artifacts with integrity verification
- update SB3C branding, documentation, and dependency URLs
- fix standalone builds and production service worker caching
- configure GitHub Pages deployment workflow
2026-08-05 20:51:52 +08:00
Thomas Weber ca5decb80e 3.13.0 2026-05-24 13:52:46 -05:00
Thomas Weber 9023581443 Update packages 2026-05-23 01:28:26 -05:00
Thomas Weber cdd1c7583b 3.12.0 2026-03-29 19:09:18 -05:00
Thomas Weber c435852972 3.11.0 2026-01-17 08:37:23 -06:00
Thomas Weber bf4e500beb 3.10.0 2025-12-31 19:30:05 -06:00
Thomas Weber 30588327e9 npm pkg fix 2025-12-31 19:20:11 -06:00
dependabot[bot] b58611ebff build(deps): bump @turbowarp/sbdl from 6.0.0 to 7.0.0 (#1024)
Bumps [@turbowarp/sbdl](https://github.com/forkphorus/sb-downloader) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/forkphorus/sb-downloader/releases)
- [Commits](https://github.com/forkphorus/sb-downloader/compare/v6.0.0...v7.0.0)

---
updated-dependencies:
- dependency-name: "@turbowarp/sbdl"
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-29 20:40:31 -06:00
Thomas Weber 52670b5c38 3.9.0 2025-10-19 11:36:15 -05:00
dependabot[bot] de442d0007 build(deps-dev): bump cross-env from 7.0.3 to 10.1.0 (#1005)
Bumps [cross-env](https://github.com/kentcdodds/cross-env) from 7.0.3 to 10.1.0.
- [Release notes](https://github.com/kentcdodds/cross-env/releases)
- [Changelog](https://github.com/kentcdodds/cross-env/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kentcdodds/cross-env/compare/v7.0.3...v10.1.0)

---
updated-dependencies:
- dependency-name: cross-env
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-19 11:31:18 -05:00
Thomas Weber 2e0fdcf84d 3.8.0 2025-10-03 21:41:59 -05:00
Thomas Weber f6b76c4c37 Update SBDL to 6.0.0 2025-09-11 18:13:12 -05:00
Thomas Weber 17a91eb84b 3.7.0 2025-08-28 18:31:20 -05:00
Thomas Weber 91b0af0897 No longer accepting donations
An explanation will be on https://docs.turbowarp.org/donate soon
2025-07-16 23:13:11 -05:00
Thomas Weber 0daa9eab52 3.6.0 2025-06-12 15:25:08 -05:00
dependabot[bot] b6377a9c65 build(deps-dev): bump @turbowarp/scratch-storage (#974)
Bumps [@turbowarp/scratch-storage](https://github.com/TurboWarp/scratch-storage) from 0.0.202502192258 to 0.0.202505311821.
- [Commits](https://github.com/TurboWarp/scratch-storage/commits)

---
updated-dependencies:
- dependency-name: "@turbowarp/scratch-storage"
  dependency-version: 0.0.202505311821
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-11 16:57:22 -05:00
Thomas Weber 5014f32837 3.5.0 2025-05-29 21:25:18 -05:00
Thomas Weber 38cde978ed 3.4.2 2025-03-12 18:23:01 -05:00
dependabot[bot] e97ce4357b build(deps-dev): bump @turbowarp/scratch-storage (#948)
Bumps [@turbowarp/scratch-storage](https://github.com/TurboWarp/scratch-storage) from 0.0.202403251715 to 0.0.202502192258.
- [Commits](https://github.com/TurboWarp/scratch-storage/commits)

---
updated-dependencies:
- dependency-name: "@turbowarp/scratch-storage"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-20 10:21:53 -06:00
Muffin 3cd5378d5a Update dependencies 2025-02-20 00:01:46 -06:00
Thomas Weber 9d121d3f72 3.4.1 2025-02-01 21:29:28 -06:00
Thomas Weber 90beb84d79 3.4.0 2025-02-01 18:40:13 -06:00
Muffin 4ab40b3284 3.3.0 2025-02-01 11:41:30 -06:00
Muffin b67c3a063a 3.2.0 2025-01-23 14:22:38 -06:00
Thomas Weber 8046279314 3.1.0 2024-12-19 17:15:08 -06:00
Muffin ac86917ca9 Don't use a worker for downloading projects
We are not doing anything else on the main thread that would
justify spinning up a Worker. They are just another source of
possible error.
2024-07-24 00:29:48 -05:00
Muffin e6a94811e9 Update dependencies 2024-07-21 20:24:03 -05:00
Muffin ebd5561f4f 3.0.0 2024-05-28 04:48:23 -05:00
Muffin 4721be9221 Replace jszip with @turbowarp/jszip 2024-05-20 12:53:45 -05:00
Muffin 31b31be5d5 2.0.0 2024-04-07 15:48:06 -05:00
dependabot[bot] 5ebb802137 build(deps-dev): bump @turbowarp/scratch-storage (#841)
Bumps [@turbowarp/scratch-storage](https://github.com/TurboWarp/scratch-storage) from 0.0.0-development-202401111301-7559569 to 0.0.202403251715.
- [Commits](https://github.com/TurboWarp/scratch-storage/commits)

---
updated-dependencies:
- dependency-name: "@turbowarp/scratch-storage"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-25 17:18:54 -05:00
Muffin 43637cf7cb Mozilla Public License 2.0
The GPL family of licenses are not perfect. Notably they are incompatible with
the SIL OFL 1.1 used by the fonts in scratch-render-fonts. In the packager we
'statically link' all of this those fonts into one HTML file. Is that legal?
Seems like you can make an argument that it's not. Who knows. I'm not a lawyer.

MPL 2.0 is a good alternative: It's still copyleft, used by real projects,
backed by a real organization, and GPL compatible.

Before 604aacc9a5 all changes were either by me
or under BSD3c. There are no third-party non-robot LGPL commits. Thus we can
make this switch.

Related: https://github.com/TurboWarp/scratch-gui/pull/909
2024-03-15 21:25:07 -05:00
Muffin 604aacc9a5 Open source should stay open source. 2024-02-23 15:43:49 -06:00
Muffin dcd6856e2c 1.10.0 2024-02-04 16:42:18 -06:00
Muffin 1427b9d9d2 Update scratch-svg-renderer 2024-01-14 01:12:20 -06:00
Muffin d49a5d7d64 Update scratch-* packages now that merge-upstream is approaching completion 2024-01-11 17:27:11 -06:00
Muffin addc7bf4ac Update website to Node 20 2024-01-01 13:05:38 -06:00
dependabot[bot] e56577d1c4 build(deps): bump @turbowarp/sbdl from 2.3.3 to 3.0.0 (#757)
Bumps [@turbowarp/sbdl](https://github.com/forkphorus/sb-downloader) from 2.3.3 to 3.0.0.
- [Release notes](https://github.com/forkphorus/sb-downloader/releases)
- [Commits](https://github.com/forkphorus/sb-downloader/compare/v2.3.3...v3.0.0)

---
updated-dependencies:
- dependency-name: "@turbowarp/sbdl"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-15 18:51:02 -05:00
dependabot[bot] 07f5fe8cd0 build(deps): bump cross-fetch from 3.1.6 to 4.0.0 (#712)
Bumps [cross-fetch](https://github.com/lquixada/cross-fetch) from 3.1.6 to 4.0.0.
- [Release notes](https://github.com/lquixada/cross-fetch/releases)
- [Changelog](https://github.com/lquixada/cross-fetch/blob/v4.x/CHANGELOG.md)
- [Commits](https://github.com/lquixada/cross-fetch/compare/v3.1.6...v4.0.0)

---
updated-dependencies:
- dependency-name: cross-fetch
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-15 18:24:42 -05:00
GarboMuffin 0c3202a3e0 1.9.2 2023-09-04 15:08:04 -05:00
Muffin c7fe631da1 1.9.1 2023-08-25 15:22:06 -05:00
Muffin 75a1d4c81a 1.9.0 2023-08-19 12:20:50 -05:00
GarboMuffin 31bf44aa93 1.8.0 2023-06-20 19:06:39 -05:00
GarboMuffin 04a4a288c1 1.7.0 2023-06-11 13:34:54 -05:00