[dependabot]

Bumps @missing-elements/h5p-offline-player from 1.4.0 to 1.4.1.

Release notes

Sourced from @​missing-elements/h5p-offline-player's releases.

v1.4.1

@missing-elements/h5p-offline-player 1.4.1 and @missing-elements/h5p-embed 1.5.1. The runtime stays at 1.0.1 and the library pack at 1.0.1. Normalize, verify, author, cmi5 and the VS Code extension are unchanged.

The player 1.4.1

A package on a host that honours Range boots with far fewer requests (#133). The player reads an archive's index in small pieces: the end of the file, the central directory, then each file's local header and its data. Over HTTP each piece was a request, made one after another. With libraries="pack" the worker read the index twice, because attaching the pack's newer libraries builds it again.

A 1.5 MB quiz took fourteen ranged requests to ready. On Lovable's and Vercel's CDNs each small one took 0.2 to 0.4 s, about 2.4 s of a 5.5 s first load.

Small reads now come from a cache of 64 kB blocks, the way pdf.js loads a document. A read fetches the blocks it lacks in one request, and every later read of those bytes costs nothing, including the second pass over the index. The quiz now takes four requests: the probe, the end of the file, its start, and the libraries. The player's own small test packages went from ten requests to three.

Media is read as before: a stream longer than one block goes straight to the network, and the cache holds at most 4 MB per worker. A picked file and a downloaded archive are read locally and are not affected. Nothing that docs/compatibility.md covers changes, so this is a patch.

@missing-elements/h5p-embed 1.5.1

It writes sites and SCORM packages with player 1.4.1, and nothing else changed. A SCORM package reads its archive from the LMS by ranged requests too, as Moodle serves it, so it boots with fewer of them once it is written again.

Upgrading

• A site that plays packages updates the element and the Service Worker together, as with any release. On a CDN, change the player's URL to @missing-elements/h5p-offline-player@1.4.1 and copy its dist/h5p-sw.js again. The runtime's URL stays at 1.0.1.
• Embed sites and SCORM packages: run npx @missing-elements/h5p-embed@latest again on Node 22 or later, then deploy the site or replace the zip in the LMS.

Full Changelog: missing-elements/h5p-offline-player@runtime-v1.0.1...v1.4.1

Commits

• 844a8f0 chore: bump player to 1.4.1 and embed to 1.5.1
• 119345d test(player): compare large byte arrays directly in the range handle tests
• b0e0912 perf(player): make the block cache on first use
• 9e04ce5 perf(player): small range reads come from a block cache
• b1b7553 chore: update package versions and documentation references
• 07ba685 fix(runtime): the content's id is the same on every load of a package
• ea3f222 chore(deps-dev): bump the development-dependencies group with 4 updates
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)