Release v0.7.1

[avanelsas]

Patch release bundling the 5 commits merged to main since v0.7.0. No BareBuild / server-state work is included.

Changes

• package.json: 0.7.0 → 0.7.1
• CHANGELOG.md: [Unreleased] promoted to [0.7.1] — 2026-06-10

Fixed

• Tables and structural containers usable on the canvas — empty x-table-cells stretch to the row height; tables/rows/cells and other structural containers get a droppable footprint. Editor-only; export unaffected. (fix(canvas): make table & structural containers droppable; empty table cells fill the row #66)
• Overlay components (sidebar / drawer / modal) usable on the canvas. (fix: make sidebar/drawer/modal usable on the canvas #65)

Changed

• BareDOM 3.2.0 → 3.3.0 (adapter-only upstream; no API changes). (deps: bump BareDOM 3.2.0 → 3.3.0 #63)
• Load-boundary hardening + codegen de-duplication (autosave routed through the same checks as file-open, strict :version reject, save-timer cancel on load, autosave-failure indicator; shared action-ref/template-source helpers; volatile! removed). (review pass: load-boundary hardening + codegen dedup #64)
• GitHub Releases published on v* tag push. (ci: publish a GitHub Release on tag push #62)

Security

• Identifier-shape scanning at the load boundary closes JS/CLJS string-injection vectors in both export plugins. (review pass: load-boundary hardening + codegen dedup #64)

Verification

Cut with scripts/release.clj (clojure -X:release :bump :patch :confirm true), which ran all four PR-readiness gates green:

• clj-kondo --lint src test scripts
• cljfmt check
• npx shadow-cljs compile test — 866 tests / 0 failures
• npx shadow-cljs release app — 0 warnings

BareDOM deps.edn ↔ meta/versions.cljs lockstep verified.

After merge

Tag to publish the Release: git checkout main && git pull && git tag v0.7.1 && git push origin v0.7.1 (the tag triggers release.yml).

🤖 Generated with Claude Code