[dependabot]

Bumps @addon-core/inject-script from 0.3.1 to 0.5.0.

Release notes

Sourced from @​addon-core/inject-script's releases.

v0.5.0

🚀 Release @addon-core/inject-script v0.5.0 (2026-08-25)

💥 Breaking Changes

• run() now returns success/failure target outcomes instead of fulfilled/rejected/unknown records. Successful values moved from result to value, and target delivery and timeout failures resolve in the result array. The public InjectScriptTimeoutDetails type and timeout partialResults fields were removed.

✨ Features

• return best-effort target outcomes from run (d31cfa1)

  Classify execution, delivery, timeout, target-gone, and unobservable failures per target. Preserve explicit target order and user activation, and share one MV2 response listener per batch.

📝 Documentation

• align contributor guidance with target isolation (ac509d8)

• explain best-effort target outcomes (e61ed23)

  Document result kinds, per-target failures, explicit target ordering, and the linear fan-out cost across MV2 and MV3.

🙌 Contributors

• Anjey Tsibylskij (@​atldays) — 4 commits

v0.4.0

🚀 Release @addon-core/inject-script v0.4.0 (2026-08-24)

💥 Breaking Changes

• replace flat tabId/frameId/documentId options with a required nested target. Rename timeFallback to timeoutMs and make run() resolve to InjectScriptResult[]. options() now accepts execution options only. Callback arguments and results must be JSON-compatible, unsupported capabilities throw typed package errors, and file arrays must be non-empty.

... (truncated)

Changelog

Sourced from @​addon-core/inject-script's changelog.

🚀 Release @addon-core/inject-script v0.5.0 (2026-08-25)

💥 Breaking Changes

• run() now returns success/failure target outcomes instead of fulfilled/rejected/unknown records. Successful values moved from result to value, and target delivery and timeout failures resolve in the result array. The public InjectScriptTimeoutDetails type and timeout partialResults fields were removed.

✨ Features

• return best-effort target outcomes from run (d31cfa1)

  Classify execution, delivery, timeout, target-gone, and unobservable failures per target. Preserve explicit target order and user activation, and share one MV2 response listener per batch.

📝 Documentation

• align contributor guidance with target isolation (ac509d8)

• explain best-effort target outcomes (e61ed23)

  Document result kinds, per-target failures, explicit target ordering, and the linear fan-out cost across MV2 and MV3.

🙌 Contributors

• Anjey Tsibylskij (@​atldays) — 4 commits

🚀 Release @addon-core/inject-script v0.4.0 (2026-08-24)

💥 Breaking Changes

• replace flat tabId/frameId/documentId options with a required nested target. Rename timeFallback to timeoutMs and make run() resolve to InjectScriptResult[]. options() now accepts execution options only. Callback arguments and results must be JSON-compatible, unsupported capabilities throw typed package errors, and file arrays must be non-empty.

✨ Features

... (truncated)

Commits

• 7781a1a chore(release): v0.5.0
• 633f7a1 chore: merge pull request #9 from addon-stack/develop
• ac509d8 docs: align contributor guidance with target isolation
• e61ed23 docs: explain best-effort target outcomes
• d31cfa1 feat!: return best-effort target outcomes from run
• 256dc18 Merge main into develop
• 91c497a chore(release): v0.4.0
• 6917238 chore: merge pull request #8 from addon-stack/develop
• 9fe5645 docs: refresh contribution and security guidance
• 4280e5c docs: rewrite package documentation for the new API
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​addon-core/inject-script since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.