search

decentralized-identity / veramo

A JavaScript Framework for Verifiable Data
https://veramo.io
Apache License 2.0
443 stars 133 forks source link

fix(deps): Update did-vc-libraries (major) #1410

Open renovate[bot] opened 3 months ago

renovate[bot] commented 3 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@digitalcredentials/ed25519-signature-2020 ^4.0.0 -> ^6.0.0 age adoption passing confidence
@digitalcredentials/jsonld ^6.0.0 -> ^9.0.0 age adoption passing confidence
@digitalcredentials/jsonld-signatures ^10.0.0 -> ^12.0.0 age adoption passing confidence
@digitalcredentials/vc ^7.0.0 -> ^9.0.0 age adoption passing confidence
jsonld ^6.0.0 -> ^9.0.0 age adoption passing confidence

Release Notes

digitalcredentials/ed25519-signature-2020 (@​digitalcredentials/ed25519-signature-2020) ### [`v6.0.0`](https://redirect.github.com/digitalcredentials/ed25519-signature-2020/blob/HEAD/CHANGELOG.md#600---2024-09-17) [Compare Source](https://redirect.github.com/digitalcredentials/ed25519-signature-2020/compare/v5.0.0...v6.0.0) ##### Changed - **BREAKING**: The dependency `@digitalcredentials/jsonld-signatures@12.0.0` now requires `expo-crypto` for React Native sha256 digest hashing, instead of `@sphereon/isomorphic-webcrypto@2.5.0-unstable.0`. - **IMPORTANT**: This means that IF you're using this library inside a React Native project, you MUST include `expo-crypto` in your project's `dependencies`. ### [`v5.0.0`](https://redirect.github.com/digitalcredentials/ed25519-signature-2020/blob/HEAD/CHANGELOG.md#500---2024-08-03) [Compare Source](https://redirect.github.com/digitalcredentials/ed25519-signature-2020/compare/v4.0.0...v5.0.0) ##### Changed - **BREAKING**: Update to `@digitalcredentials/jsonld-signatures` v11.0.0 (latest Sphereon webcrypto fork, latest DCC forks of jsonld and http-client). - **BREAKING**: Reverts cache clearing behavior of v10.0.0.
digitalcredentials/jsonld.js (@​digitalcredentials/jsonld) ### [`v9.0.0`](https://redirect.github.com/digitalcredentials/jsonld.js/blob/HEAD/CHANGELOG.md#900---2024-08-03) [Compare Source](https://redirect.github.com/digitalcredentials/jsonld.js/compare/v6.0.0...v9.0.0) ##### Changed - **BREAKING**: Re-fork as `@digitalcredentials/jsonld` (to fix upstream http-client export error). - Use `@digitalcredentials/http-client@5.0.0` fork.
digitalcredentials/jsonld-signatures (@​digitalcredentials/jsonld-signatures) ### [`v12.0.1`](https://redirect.github.com/digitalcredentials/jsonld-signatures/blob/HEAD/CHANGELOG.md#1201---2024-09-17) [Compare Source](https://redirect.github.com/digitalcredentials/jsonld-signatures/compare/v12.0.0...v12.0.1) ##### Fixed - Fix `expo-crypto` browser export. ### [`v12.0.0`](https://redirect.github.com/digitalcredentials/jsonld-signatures/blob/HEAD/CHANGELOG.md#1200---2024-09-17) [Compare Source](https://redirect.github.com/digitalcredentials/jsonld-signatures/compare/v11.0.0...v12.0.0) ##### Changed - **BREAKING**: Now uses `expo-crypto` for React Native sha256 digest hashing, instead of `@sphereon/isomorphic-webcrypto@2.5.0-unstable.0`. - **IMPORTANT**: This means that IF you're using this library inside a React Native project, you MUST include `expo-crypto` in your project's `dependencies`. ### [`v11.0.0`](https://redirect.github.com/digitalcredentials/jsonld-signatures/blob/HEAD/CHANGELOG.md#1100---2024-08-03) [Compare Source](https://redirect.github.com/digitalcredentials/jsonld-signatures/compare/v10.1.0...v11.0.0) ##### Changed - **BREAKING**: Now uses DCC forks of `jsonld` and `http-client`. ### [`v10.1.0`](https://redirect.github.com/digitalcredentials/jsonld-signatures/blob/HEAD/CHANGELOG.md#1010---2024-08-03) [Compare Source](https://redirect.github.com/digitalcredentials/jsonld-signatures/compare/v10.0.1...v10.1.0) ##### Added [@​kezike](https://redirect.github.com/kezike)'s updates as part of supporting VC 2.0 spec. - Add ProofSet `derive()`, pass `proofSet` param to functions. ##### Changed - Update DigitalBazaar's `jsonld` dep to `#v10.1.x` branch (until upstream react-native PR gets merged) - Potentially **breaking**: Update to `@sphereon/isomorphic-webcrypto@2.5.0-unstable.0`
digitalcredentials/vc (@​digitalcredentials/vc) ### [`v9.0.1`](https://redirect.github.com/digitalcredentials/vc/compare/v9.0.0...v9.0.1) [Compare Source](https://redirect.github.com/digitalcredentials/vc/compare/v9.0.0...v9.0.1) ### [`v9.0.0`](https://redirect.github.com/digitalcredentials/vc/blob/HEAD/CHANGELOG.md#900---2024-09-30) [Compare Source](https://redirect.github.com/digitalcredentials/vc/compare/v8.0.1...v9.0.0) ##### Fixed - add signature checks to the log before running other verification checks whose errors might prevent that logging ### [`v8.0.1`](https://redirect.github.com/digitalcredentials/vc/blob/HEAD/CHANGELOG.md#801---2024-09-04) [Compare Source](https://redirect.github.com/digitalcredentials/vc/compare/v8.0.0...v8.0.1) ##### Fixed - Fix stray Error object in `CredentialIssuancePurpose`. ### [`v8.0.0`](https://redirect.github.com/digitalcredentials/vc/blob/HEAD/CHANGELOG.md#800---2024-08-04) [Compare Source](https://redirect.github.com/digitalcredentials/vc/compare/v7.0.0...v8.0.0) ##### Added - Add support for VC 2.0 Verifiable Credentials issuance and verification. - Add support for VC 2.0 Verifiable Presentations issuance and verification. - Add support for VC 2.0 `validFrom` and `validUntil`. - Add Test vectors for VC 2.0 VCs & VPs. - Allow `credentialStatus` arrays in credential status check. - Add `derive()` API for deriving new verifiable credentials from existing ones, for the purpose of selective disclosure or unlinkable presentation. - Add optional param `now` to `verifyCredential()`, `createPresentation()`, `verify()`, and `issue()`. ##### Changed - **BREAKING**: Switch dependencies to: - `@digitalcredentials/jsonld` - `@digitalcredentials/jsonld-signatures` - `@digitalcredentials/http-client` - **BREAKING**: Default issuance now uses VC 2.0 context. - **BREAKING**: DateTime validator is now an xml schema DateTime validator. - Change `engines.node` to `>=18` to support newer keys & suites. - Update dependencies. - **BREAKING**: Remove support for `expansionMap`. (Removed in dependencies.) - **BREAKING**: Use `jsonld-signatures@11` and `jsonld@8` to get new `safe` mode (and on by default when using `canonize`) feature. - **BREAKING**: Check if credential has expired when `expirationDate` property exists. - **BREAKING**: Convert to module (ESM). - **BREAKING**: Require Node.js >=14. - Update dependencies. - **BREAKING**: `did-veres-one@15.0.0` used in tests. - Lint module. ##### Fixed - Ensure that `issuanceDate` is only checked on verification, not issuance. - Fix bug with option overrides for verifying presentations. ##### Removed - **BREAKING**: Remove ODRL and VC examples contexts from `./lib/contexts/` and from the default document loader. The contexts are now available in [`@digitalbazaar/odrl-context`](https://redirect.github.com/digitalbazaar/odrl-context) and [`@digitalbazaar/credentials-examples-context`](https://redirect.github.com/digitalbazaar/credentials-examples-context).

Configuration

📅 Schedule: Branch creation - "before 5am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR was generated by Mend Renovate. View the repository job log.

codecov-commenter commented 1 month ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 89.72%. Comparing base (2f0b06d) to head (5402bb5).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## next #1410 +/- ## ======================================= Coverage 89.72% 89.72% ======================================= Files 177 177 Lines 26818 26818 Branches 2220 2220 ======================================= Hits 24062 24062 Misses 2756 2756 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

renovate[bot] commented 1 month ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.