0.2.0

v0.2.0 — May 19, 2026

This release removes built-in pull request commenting, adds comment-ready Markdown report output, and documents fork-safe workflows for publishing bundle-size comments.

⚠️ Breaking Changes & Deprecations

• PR Commenting: Removed the comment-pr and github-token action inputs, and stopped calling the GitHub comments API from the action runtime. Workflows should now publish comments themselves by reading the generated Markdown report. (#16)

🚀 New Features

• Markdown Reports: Added markdown-output-file and markdown-file so the action writes the same bundle-size Markdown body previously used for PR comments alongside the machine-readable JSON report. (#16)

🔧 Maintenance & Chores

• Documentation And Security Model: Updated README examples, OpenSpec artefacts, threat model, contributor docs, tests, and dist/index.js for same-repository and fork-safe external comment workflows. (#16)

Full Changelog

0.1.1

v0.1.1 — May 18, 2026

This release adds release-stream baseline selection for comparing bundle sizes against a specific major version line.

🚀 New Features

• Release Stream Baselines: Added an optional release-stream input that selects npm baselines from a configured major release stream while preserving the existing latest-release behaviour by default. Reports, comments, docs, tests, and the generated action bundle were updated to reflect the selected primary release. (#15)

Full Changelog

0.1.0

v0.1.0 — May 17, 2026

This initial release sets up the bundle-size GitHub Action with npm baseline fetching, PR comments, release-history comparisons, security posture defaults, and project maintenance tooling.

🔒 Security Fixes

• Security Posture: Added initial repository and action security posture configuration. (#2)

🚀 New Features

• Action Foundation: Added the initial GitHub Action setup for bundle-size comparison workflows. (#1)
• npm Baselines: Added npm package fetching and support for comparing against npm release history baselines. (#3, #14)
• PR Reporting: Added bundle-size pull request comments and repository metadata support. (#6)

🔧 Maintenance & Chores

• Testing and CI: Added module-aligned source coverage and CI coverage summary reporting. (#4, #13)
• Runtime and Tooling: Upgraded Node and pnpm, and added linting, TypeScript, and Vite tooling. (#5, #12)
• Dependencies: Bumped @types/node, typescript, and @actions/core to newer versions. (#8, #7, #9)
• Dependency Management: Configured Dependabot labels for dependency update PRs. (#10)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve bundle-size:

• @jasonsaayman (#2)
• @dependabot[bot] (#8)

Full Changelog