Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump @sphereon/pex from 2.1.0 to 3.3.3 in /packages/credentials #598

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 20, 2024

Bumps @sphereon/pex from 2.1.0 to 3.3.3.

Release notes

Sourced from @​sphereon/pex's releases.

const boolean support in filters and optional field support in Fields

  • Updated:
    • Allow to use const boolean in filters.
    • Allow to use 'optional' boolean in V2 Fields object. Please be aware we do not take that value into account yet. We just added the field, so it doesn't fail validation
    • Update to PEX models 2.2.4

Performance improvement and jwt_vp_json

  • Added:
    • Significant performance improvement: Add cache for AJV field validation as the operation is expensive and can be called multiple times. The improvement is in the order of 10 times or higher especially when larger definitions are encountered
    • Expose jwt_vp_json format
  • Updated:
    • Update to PEX models 2.2.2

DataIntegrity Proof, AnonCreds 2023 support

  • Added: Support for Data Integrity Proofs, using Anoncreds 2023 format.

Initial support for SD-JWT

  • Added:
    • Initial support for Selective Disclosure JWTs (SD-JWT). API is mostly the same, but to be sure we released it as a new major version
  • Updated:
    • Update to latest pex-models, containing some definition updates
  • Fixed:
    • Fix evaluation rule All when there are no marked input descriptors

No changes, updated deps

No changes except from some updated dependencies

Changelog

Sourced from @​sphereon/pex's changelog.

v3.3.3 - 2024-04-25

  • Fixed:
    • const boolean value was missing in schema file

v3.3.2 - 2024-04-24

  • Updated:
    • Allow to use const boolean in filters.
    • Allow to use 'optional' boolean in V2 Fields object. Please be aware we do not take that value into account yet. We just added the field, so it doesn't fail validation
    • Update to PEX models 2.2.4

v3.3.1 - 2024-03-19

  • Updated:
    • Update sd-jwt packages to 0.6.1 from 0.3.0
    • Update to latest @​sphereon/ssi-types
    • Move to pnpm from yarn, given our other libraries also use pnpm

v3.3.0 - 2024-02-29

  • Added:
    • Significant performance improvement: Add cache for AJV field validation as the operation is expensive and can be called multiple times. The improvement is in the order of 10 times or higher especially when larger definitions are encountered
    • Expose jwt_vp_json format
  • Updated:
    • Update to PEX models 2.2.2

v3.2.0 - 2024-02-05

  • Added:
    • Support for Data Integrity Proofs, using Anoncreds 2023 format.

v3.1.0 - 2024-02-02

  • Updated:
    • Update to PEX models 2.2.0 which adds support for Verifiable Credential Data Integrity 1.0
  • Fixed:
    • Do not use path nested for sd-jwt
    • In the wild a presentation submission sometimes comes in as a double stringified JSON and thus string format. We detect and fix that, also providing a warning

v3.0.1 - 2024-01-19

  • Updated:
    • SD-JWT dependency updated to 0.2.0
    • SSS types updated to 0.18.1

... (truncated)

Commits
  • 8807a92 chore(release): 3.3.3
  • c56f8a1 chore(release): 3.3.3
  • d559c84 Merge pull request #156 from TimoGlastra/fix-const-boolean-value
  • 08ba4fd fix: const boolean value
  • c15fe2a Merge pull request #155 from TimoGlastra/cost-value-tests
  • 0fcfe01 test: const value tests
  • 5347e30 chore: next dev cycle
  • 88c0088 chore: v3.3.2
  • 1e1998d feat: Add optional property to field. Partially fixes #150
  • 7455153 Merge pull request #151 from TimoGlastra/feat/support-const-boolean
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot requested review from csuwildcat and diehuxx as code owners May 20, 2024 09:59
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 20, 2024
Copy link

changeset-bot bot commented May 20, 2024

⚠️ No Changeset found

Latest commit: 4365ec2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link
Contributor

github-actions bot commented May 20, 2024

TBDocs Report

✅ No errors or warnings

@web5/api

  • Project entry file: packages/api/src/index.ts

@web5/crypto

  • Project entry file: packages/crypto/src/index.ts

@web5/crypto-aws-kms

  • Project entry file: packages/crypto-aws-kms/src/index.ts

@web5/dids

  • Project entry file: packages/dids/src/index.ts

@web5/credentials

  • Project entry file: packages/credentials/src/index.ts

TBDocs Report Updated at 2024-06-12T19:19:20Z 4365ec2

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/packages/credentials/sphereon/pex-3.3.3 branch 4 times, most recently from b39da6d to 5b4f81f Compare May 23, 2024 21:44
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/packages/credentials/sphereon/pex-3.3.3 branch from 5b4f81f to cfbf3e2 Compare June 11, 2024 23:20
Bumps [@sphereon/pex](https://github.com/Sphereon-Opensource/pex) from 2.1.0 to 3.3.3.
- [Release notes](https://github.com/Sphereon-Opensource/pex/releases)
- [Changelog](https://github.com/Sphereon-Opensource/PEX/blob/develop/CHANGELOG.md)
- [Commits](Sphereon-Opensource/PEX@v2.1.0...v3.3.3)

---
updated-dependencies:
- dependency-name: "@sphereon/pex"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/packages/credentials/sphereon/pex-3.3.3 branch from cfbf3e2 to 4365ec2 Compare June 12, 2024 19:16
@thehenrytsai
Copy link
Contributor

@dependabot recreate

Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 22, 2024

Looks like @sphereon/pex is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Jul 22, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/packages/credentials/sphereon/pex-3.3.3 branch July 22, 2024 23:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants