#app-catalog 8 articles

A CDN-hosted extension bundle may only import modules its App Catalog manifest declaresgotchas / spfxReplacing an extension's stable-named bundle on the CDN without a new .sppkg works only while its define([...]) lists modules already in the installed manifest's scriptResources — one new value import and the extension…
A CDN-hosted SPFx bundle still needs a new .sppkggotchas / spfxincludeClientSideAssets: false moves assets, not versioning; the manifest pins a content-hashed filename, so old packages never request the new bundle
A command set's commands are fixed in its manifestgotchas / spfxtitle, iconImageUrl, visible and disabled change at runtime, new commands need a new .sppkg; ship one entry that opens your own menu, or reserve hidden slots (and keep their titles honest)
CDN pruning deleted the extension bundle the deployed .sppkg still referencedgotchas / spfxWith includeClientSideAssets: false the catalog pins hashed names for customizers and command sets too; a "keep N newest" prune evicts the referenced hash and the extension 404s for days — protect extension bundles by…
ListViewCommandSet button never appears — raiseOnChange() does not re-run onListViewUpdatedgotchas / spfxTwo independent causes: uploading a new .sppkg registers the extension on no site by itself (register it at runtime, or deploy it tenant-wide with the all-sites tick), and raiseOnChange() re-reads command.visible…
SPFx adds Subresource Integrity to a script when the manifest path is { path, integrity }gotchas / spfxA component manifest you pass to SPComponentLoader.loadComponent can carry an SRI hash per script resource as path { path, integrity }; SharePoint then emits script integrity crossorigin=anonymous and the browser…
SPFx in Teams — a personal app needs global deployment, not a root-site installgotchas / spfxskipFeatureDeployment: true + "all sites"; the teams/ icon-folder convention
Three .sppkg packaging pitfalls — diacritics, icon size, the Publisher columngotchas / app-catalogASCII-only solution name, icon exactly 96×96, Publisher column is AppSource-only