Prepare to release v1.8.5

hilverd · hilverd · commit b4f15e3f7471 · 2023-01-20T10:29:46.000Z
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -11,17 +11,21 @@ This applies from version 0.5.0 onwards, as some versions before that have broke
 
 ## [Unreleased]
 
+### Added
+### Changed
+### Fixed
+### Removed
+
+## [1.8.5] - 2023-01-20
+
 ### Added
 
 - Add `crossorigin` attribute to `link` element for CSS asset. This prepares it for having an `integrity` attribute added if people want to use [SRI](https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity).
 
-### Changed
 ### Fixed
 
 - Fix bug: do not ignore the `data-enable-help-for-making-changes` attribute.
 
-### Removed
-
 ## [1.8.4] - 2022-11-24
 
 ### Changed
@@ -351,7 +355,8 @@ Make the [relevant changes](https://github.com/hilverd/glossary-page-template/co
 
 - Initial release.
 
-[Unreleased]: https://github.com/hilverd/glossary-page-template/compare/v1.8.4...HEAD
+[Unreleased]: https://github.com/hilverd/glossary-page-template/compare/v1.8.5...HEAD
+[1.8.5]: https://github.com/hilverd/glossary-page-template/compare/v1.8.4...v1.8.5
 [1.8.4]: https://github.com/hilverd/glossary-page-template/compare/v1.7.4...v1.8.4
 [1.7.4]: https://github.com/hilverd/glossary-page-template/compare/v1.7.3...v1.7.4
 [1.7.3]: https://github.com/hilverd/glossary-page-template/compare/v1.7.2...v1.7.3
diff --git a/README.md b/README.md
@@ -23,7 +23,19 @@ https://glstatic.net/glossary-page-template@1/glossary.min.css
 
 These files are cached for 24 hours and get updated with any releases with a [major version number](https://semver.org/) of `1`. Alternatively you can change the URL to point to e.g. `@1.1` which gets all patch releases with version numbers of the form `1.1.x`. You can also specify a specific version such as `1.0.1` -- these are cached forever.
 
-If you [prefer](https://css-tricks.com/potential-dangers-of-third-party-javascript/) to host the static assets yourself then you can get them from the `.tar.gz` package in a release, which also contains a glossary template file that uses them.
+#### Security considerations
+
+The [safest option](https://css-tricks.com/potential-dangers-of-third-party-javascript/) would be to either host the static assets yourself or use [Subresource Integrity](https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity) (SRI) by specifying hashes for the static assets.
+
+To host the static assets yourself, you can get them from the `.tar.gz` package in a release, which also contains a glossary template file that uses them.
+
+To use SRI, change the two lines at the end of the `<head>` element so they
+
+* point to a specific version of the JS and CSS files,
+* have a `crossorigin` attribute, and
+* have an `integrity="hash-here"` attribute.
+
+You can get the `hash-here` values from the [release notes](https://github.com/hilverd/glossary-page-template/releases/latest).
 
 ## Development
 
diff --git a/elm-application.json b/elm-application.json
@@ -1,7 +1,7 @@
 {
     "name": "hilverd/glossary-page-template",
     "summary": "Create a glossary as a single HTML page hosted anywhere.",
-    "version": "1.8.4",
+    "version": "1.8.5",
     "exposed-modules": [
         "ApplicationShell",
         "Data.AboutLink",
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "glossary-page-template",
-  "version": "1.8.4",
+  "version": "1.8.5",
   "description": "Create a glossary as a single HTML page hosted anywhere.",
   "private": true,
   "author": "Hilverd Reker",

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "hilverd/glossary-page-template",`
`3`	`3`	`"summary": "Create a glossary as a single HTML page hosted anywhere.",`
`4`		`- "version": "1.8.4",`
	`4`	`+ "version": "1.8.5",`
`5`	`5`	`"exposed-modules": [`
`6`	`6`	`"ApplicationShell",`
`7`	`7`	`"Data.AboutLink",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "glossary-page-template",`
`3`		`- "version": "1.8.4",`
	`3`	`+ "version": "1.8.5",`
`4`	`4`	`"description": "Create a glossary as a single HTML page hosted anywhere.",`
`5`	`5`	`"private": true,`
`6`	`6`	`"author": "Hilverd Reker",`