docs(demo): pin consumer CDN snippets to docxodus@12.6.2

docs/demo/index.html

@@ -447,7 +447,7 @@ <h2 class="section-title for-arcade">The game below is a Word document.</h2>
     const moduleSnippet = `<div id="docx-editor" style="height:80vh"></div>
 <script type="module">
   import { createRibbonEditor } from
-    "https://cdn.jsdelivr.net/npm/docxodus@12.6.1/dist/embed.bundle.js";
+    "https://cdn.jsdelivr.net/npm/docxodus@12.6.2/dist/embed.bundle.js";
 
   await createRibbonEditor("#docx-editor", "/documents/example.docx");
 <\/script>`;

docs/demo/tools/engine-pin.test.mjs

@@ -24,7 +24,7 @@ const PINNED_FILES = [
   'npm/src/index.ts',
 ];
 
-// `docxodus@12.6.1`, `docxodus@12.6.1/dist/embed.bundle.js`, the bare npm URL —
+// `docxodus@12.6.2`, `docxodus@12.6.2/dist/embed.bundle.js`, the bare npm URL —
 // all of them, but never `docxodus@latest`, which the docs use deliberately in
 // one "unpinned" example.
 const PIN = /docxodus@(\d+\.\d+\.\d+)/g;

docs/npm-package.md

@@ -975,7 +975,7 @@ editor, the `embed` bundle is the one-tag path — it packages the whole stack
 <div id="editor"></div>
 <script type="module">
   import { createViewer, createEditor }
-    from 'https://cdn.jsdelivr.net/npm/docxodus@12.6.1/dist/embed.bundle.js';
+    from 'https://cdn.jsdelivr.net/npm/docxodus@12.6.2/dist/embed.bundle.js';
 
   // Choose either factory, or render both into separate containers as shown.
   // Source: URL string, Uint8Array, ArrayBuffer, Blob, or File.

npm/README.md

@@ -99,7 +99,7 @@ runtime location auto-detected — no build step, no configuration:
 ```html
 <div id="doc" style="height: 100dvh"></div>
 <script type="module">
-  import { createRibbonEditor } from 'https://cdn.jsdelivr.net/npm/docxodus@12.6.1/dist/embed.bundle.js';
+  import { createRibbonEditor } from 'https://cdn.jsdelivr.net/npm/docxodus@12.6.2/dist/embed.bundle.js';
   const ribbon = await createRibbonEditor('#doc', './contract.docx'); // or bytes / Blob / File
   // ...later: const editedBytes = ribbon.save();
 </script>
@@ -682,7 +682,7 @@ so a page can embed a full viewer or editor without hosting anything itself.
 <div id="app" style="height: 100dvh"></div>
 <script type="module">
   import { createViewer, createEditor, createRibbonEditor }
-    from 'https://cdn.jsdelivr.net/npm/docxodus@12.6.1/dist/embed.bundle.js';
+    from 'https://cdn.jsdelivr.net/npm/docxodus@12.6.2/dist/embed.bundle.js';
 
   // Choose a factory, or render several into separate containers as shown.
   // Source may be a URL, Uint8Array, ArrayBuffer, Blob, or File.
@@ -712,7 +712,7 @@ For pages that can't use modules, `dist/embed.iife.js` exposes the same surface
 
 ```html
 <div id="doc"></div>
-<script src="https://cdn.jsdelivr.net/npm/docxodus@12.6.1/dist/embed.iife.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/docxodus@12.6.2/dist/embed.iife.js"></script>
 <script>
   Docxodus.createRibbonEditor('#doc').then((ribbon) => { /* ... */ });
 </script>
@@ -728,7 +728,7 @@ first `<bundle dir>/wasm/`, then `<bundle dir>/` as a fallback. On a CDN that re
 
 ### CDN caveats
 
-- **Pin an exact version in production** (`docxodus@12.6.1`, not `@latest`) — CDN responses are
+- **Pin an exact version in production** (`docxodus@12.6.2`, not `@latest`) — CDN responses are
   cached as immutable, and the wire shapes between the JS wrappers and the WASM assemblies must
   come from the same release.
 - The build patches the .NET loader to fetch with `credentials: "omit"` — required because the

npm/examples/embed.html

@@ -45,7 +45,7 @@ <h1>Docxodus embed demo</h1>
     bundle relatively. From a CDN the ONLY line that changes is the import:
 
       import { createViewer, createEditor, createRibbonEditor }
-        from "https://cdn.jsdelivr.net/npm/docxodus@12.6.1/dist/embed.bundle.js";
+        from "https://cdn.jsdelivr.net/npm/docxodus@12.6.2/dist/embed.bundle.js";
 
     WASM assets auto-resolve from the wasm/ directory next to the bundle —
     no other configuration needed. Pin an exact version in production so the

npm/src/core.ts

@@ -533,7 +533,7 @@ async function yieldToMain(): Promise<void> {
 function getDefaultWasmBasePath(): string {
   try {
     // import.meta.url gives us the URL of this module
-    // e.g., "https://cdn.jsdelivr.net/npm/docxodus@12.6.1/dist/core.js"
+    // e.g., "https://cdn.jsdelivr.net/npm/docxodus@12.6.2/dist/core.js"
     // or "file:///path/to/node_modules/docxodus/dist/core.js"
     const moduleUrl = import.meta.url;
 

npm/src/embed.ts

@@ -7,7 +7,7 @@
  * ```html
  * <div id="doc"></div>
  * <script type="module">
- *   import { createViewer } from "https://cdn.jsdelivr.net/npm/docxodus@12.6.1/dist/embed.bundle.js";
+ *   import { createViewer } from "https://cdn.jsdelivr.net/npm/docxodus@12.6.2/dist/embed.bundle.js";
  *   await createViewer("#doc", "./contract.docx");
  * </script>
  * ```

npm/tests/social-demo.spec.ts

@@ -21,7 +21,7 @@ import { test, expect, type Page } from '@playwright/test';
  */
 
 const OVERRIDES = 'engine=./embed.bundle.js&doc=./docxodus-demo-guide.docx';
-const RELEASE_ENGINE = 'docxodus@12.6.1/dist/embed.bundle.js';
+const RELEASE_ENGINE = 'docxodus@12.6.2/dist/embed.bundle.js';
 
 async function formattingState(page: Page, anchor: string, text: string) {
   return page.evaluate(({ anchor, text }) => {