Summary

Fixes #829.

This changes shared version normalization so inferVersionFromRequiredVersion(requiredVersion) is only used as a last-resort fallback.

Provider version now resolves in this order:

1. Explicit shared version
2. Installed package version from package.json
3. Version inferred from requiredVersion

Problem

Previously, normalizeShareItem() treated the inferred requiredVersion value as part of the explicit version path:

const explicitVersion =
  typeof shareItem === 'object'
    ? shareItem.version || inferVersionFromRequiredVersion(shareItem.requiredVersion)
    : undefined;

const version = explicitVersion || searchPackageVersion(key);

With [email protected] installed and requiredVersion: '^19.1.1', the generated shared metadata advertised react as provider version 19.1.1.

requiredVersion is a consumer constraint, while version should describe the actual package version this build can provide.

Changes

• Split explicit shared version from the inferred requiredVersion fallback.
• Prefer searchPackageVersion(key) before using the inferred fallback.
• Added a regression test for installed [email protected] with requiredVersion: '^19.1.1'.

Validation

pnpm exec vitest run src/utils/__tests__/normalizeModuleFederationOption.test.ts
pnpm test
pnpm run typecheck
pnpm run fmt.check
pnpm run build

Results:

• src/utils/__tests__/normalizeModuleFederationOption.test.ts: 30 passed
• pnpm test: 34 files, 520 tests passed
• typecheck: passed
• fmt.check: passed
• build: passed