release: version packages (#3857)

packages/cli/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Change Log
 
+## 1.5.0
+
+### Patch Changes
+
+- Updated dependencies [2cab3787c]
+- Updated dependencies [73666f8fa]
+- Updated dependencies [268dc50e7]
+- Updated dependencies [fa0dbafe8]
+- Updated dependencies [497d5b526]
+  - @logto/schemas@1.5.0
+  - @logto/phrases@1.4.0
+
 ## 1.4.0
 
 ### Patch Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/cli",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "Logto CLI.",
   "author": "Silverhand Inc. <[email protected]>",
   "homepage": "https://github.com/logto-io/logto#readme",
@@ -46,9 +46,9 @@
     "@logto/connector-kit": "workspace:^1.1.1",
     "@logto/core-kit": "workspace:^2.0.0",
     "@logto/language-kit": "workspace:^1.0.0",
-    "@logto/phrases": "workspace:^1.3.0",
+    "@logto/phrases": "workspace:^1.4.0",
     "@logto/phrases-ui": "workspace:^1.2.0",
-    "@logto/schemas": "workspace:1.4.0",
+    "@logto/schemas": "workspace:1.5.0",
     "@logto/shared": "workspace:^2.0.0",
     "@silverhand/essentials": "^2.5.0",
     "chalk": "^5.0.0",

packages/cloud/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @logto/cloud
 
+## 0.2.6
+
+### Patch Changes
+
+- ac65c8de4: ### Enable strict CSP policy check header
+
+  This change removes the report only flag from CSP security header settings, which will enables the strict CSP policy check for all requests.
+
+- Updated dependencies [2cab3787c]
+- Updated dependencies [73666f8fa]
+- Updated dependencies [268dc50e7]
+- Updated dependencies [fa0dbafe8]
+- Updated dependencies [497d5b526]
+  - @logto/schemas@1.5.0
+  - @logto/cli@1.5.0
+
 ## 0.2.5
 
 ### Patch Changes

packages/cloud/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/cloud",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Logto Cloud service.",
   "main": "build/index.js",
   "author": "Silverhand Inc. <[email protected]>",
@@ -24,10 +24,10 @@
   },
   "dependencies": {
     "@logto/app-insights": "workspace:^1.0.0",
-    "@logto/cli": "workspace:^1.2.0",
+    "@logto/cli": "workspace:^1.5.0",
     "@logto/connector-kit": "workspace:^1.1.1",
     "@logto/core-kit": "workspace:^2.0.0",
-    "@logto/schemas": "workspace:^1.2.0",
+    "@logto/schemas": "workspace:^1.5.0",
     "@logto/shared": "workspace:^2.0.0",
     "@silverhand/essentials": "^2.5.0",
     "@withtyped/postgres": "^0.9.0",

packages/connectors/connector-aliyun-dm/CHANGELOG.md

@@ -0,0 +1,7 @@
+# @logto/connector-aliyun-dm
+
+## 1.0.1
+
+### Patch Changes
+
+- 64af2dc88: Fix Aliyun Direct Mail and Aliyun Short Message Service connectors' signature functions.

packages/connectors/connector-aliyun-dm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/connector-aliyun-dm",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Aliyun DM connector implementation.",
   "dependencies": {
     "@logto/connector-kit": "workspace:^1.1.0"

packages/connectors/connector-aliyun-sms/CHANGELOG.md

@@ -0,0 +1,7 @@
+# @logto/connector-aliyun-sms
+
+## 1.0.1
+
+### Patch Changes
+
+- 64af2dc88: Fix Aliyun Direct Mail and Aliyun Short Message Service connectors' signature functions.

packages/connectors/connector-aliyun-sms/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/connector-aliyun-sms",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Aliyun SMS connector implementation.",
   "dependencies": {
     "@logto/connector-kit": "workspace:^1.1.0"

packages/console/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Change Log
 
+## 1.4.0
+
+### Minor Changes
+
+- 73666f8fa: Provide new features for webhooks
+
+  ## Features
+
+  - Manage webhooks via the Admin Console
+  - Securing webhooks by validating signature
+  - Allow to enable/disable a webhook
+  - Track recent execution status of a webhook
+  - Support multi-events for a webhook
+
+  ## Updates
+
+  - schemas: add `name`, `events`, `signingKey`, and `enabled` fields to the `hook` schema
+  - core: change the `user-agent` value from `Logto (https://logto.io)` to `Logto (https://logto.io/)` in the webhook request headers
+  - core: deprecate `event` field in all hook-related APIs, use `events` instead
+  - core: deprecate `retries` field in the `HookConfig` for all hook-related APIs, now it will fallback to `3` if not specified and will be removed in the future
+  - core: add new APIs for webhook management
+    - `GET /api/hooks/:id/recent-logs` to retrieve recent execution logs(24h) of a webhook
+    - `POST /api/hooks/:id/test` to test a webhook
+    - `PATCH /api/hooks/:id/signing-key` to regenerate the signing key of a webhook
+  - core: support query webhook execution stats(24h) via `GET /api/hooks/:id` and `GET /api/hooks/:id` by specifying `includeExecutionStats` query parameter
+  - console: support webhook management
+
+- 268dc50e7: Support setting default API Resource from Console and API
+
+  - New API Resources will not be treated as default.
+  - Added `PATCH /resources/:id/is-default` to setting `isDefault` for an API Resource.
+    - Only one default API Resource is allowed per tenant. Setting one API default will reset all others.
+
+- 497d5b526: Support updating sign-in identifiers in user details form
+  - Admin can now update user sign-in identifiers (username, email, phone number) in the user details form in user management.
+  - Other trivial improvements and fixes, e.g. input field placeholder, error handling, etc.
+
 ## 1.3.0
 
 ### Minor Changes

packages/console/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/console",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "> TODO: description",
   "author": "Silverhand Inc. <[email protected]>",
   "homepage": "https://github.com/logto-io/logto#readme",
@@ -29,10 +29,10 @@
     "@logto/connector-kit": "workspace:^1.1.1",
     "@logto/core-kit": "workspace:^2.0.0",
     "@logto/language-kit": "workspace:^1.0.0",
-    "@logto/phrases": "workspace:^1.3.0",
+    "@logto/phrases": "workspace:^1.4.0",
     "@logto/phrases-ui": "workspace:^1.2.0",
     "@logto/react": "^2.0.1",
-    "@logto/schemas": "workspace:^1.4.0",
+    "@logto/schemas": "workspace:^1.5.0",
     "@logto/shared": "workspace:^2.0.0",
     "@mdx-js/react": "^1.6.22",
     "@parcel/compressor-brotli": "2.9.1",

packages/core/CHANGELOG.md

@@ -1,5 +1,65 @@
 # Change Log
 
+## 1.5.0
+
+### Minor Changes
+
+- 73666f8fa: Provide new features for webhooks
+
+  ## Features
+
+  - Manage webhooks via the Admin Console
+  - Securing webhooks by validating signature
+  - Allow to enable/disable a webhook
+  - Track recent execution status of a webhook
+  - Support multi-events for a webhook
+
+  ## Updates
+
+  - schemas: add `name`, `events`, `signingKey`, and `enabled` fields to the `hook` schema
+  - core: change the `user-agent` value from `Logto (https://logto.io)` to `Logto (https://logto.io/)` in the webhook request headers
+  - core: deprecate `event` field in all hook-related APIs, use `events` instead
+  - core: deprecate `retries` field in the `HookConfig` for all hook-related APIs, now it will fallback to `3` if not specified and will be removed in the future
+  - core: add new APIs for webhook management
+    - `GET /api/hooks/:id/recent-logs` to retrieve recent execution logs(24h) of a webhook
+    - `POST /api/hooks/:id/test` to test a webhook
+    - `PATCH /api/hooks/:id/signing-key` to regenerate the signing key of a webhook
+  - core: support query webhook execution stats(24h) via `GET /api/hooks/:id` and `GET /api/hooks/:id` by specifying `includeExecutionStats` query parameter
+  - console: support webhook management
+
+- 268dc50e7: Support setting default API Resource from Console and API
+
+  - New API Resources will not be treated as default.
+  - Added `PATCH /resources/:id/is-default` to setting `isDefault` for an API Resource.
+    - Only one default API Resource is allowed per tenant. Setting one API default will reset all others.
+
+- fa0dbafe8: Add custom domain support
+
+### Patch Changes
+
+- ac65c8de4: ### Enable strict CSP policy check header
+
+  This change removes the report only flag from CSP security header settings, which will enables the strict CSP policy check for all requests.
+
+- 3d9885233: ## Bump oidc-provider version
+
+  Bump oidc-provider version to [v8.2.2](https://github.com/panva/node-oidc-provider/releases/tag/v8.2.2). This version fixes a bug that prevented the revoked scopes from being removed from the access token.
+
+  > Issued Access Tokens always only contain scopes that are defined on the respective Resource Server (returned from features.resourceIndicators.getResourceServerInfo).
+
+  If the scopes are revoked from the resource server, they should be removed from the newly granted access token. This is now fixed in the new version of oidc-provider.
+
+- 813e21639: Bug fix: reset password webhook should be triggered when the user resets password
+- Updated dependencies [2cab3787c]
+- Updated dependencies [73666f8fa]
+- Updated dependencies [268dc50e7]
+- Updated dependencies [fa0dbafe8]
+- Updated dependencies [497d5b526]
+  - @logto/schemas@1.5.0
+  - @logto/console@1.4.0
+  - @logto/phrases@1.4.0
+  - @logto/cli@1.5.0
+
 ## 1.4.0
 
 ### Minor Changes

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/core",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "The open source identity solution.",
   "main": "build/index.js",
   "author": "Silverhand Inc. <[email protected]>",
@@ -29,15 +29,15 @@
     "@azure/storage-blob": "^12.13.0",
     "@koa/cors": "^4.0.0",
     "@logto/app-insights": "workspace:^1.2.0",
-    "@logto/cli": "workspace:^1.4.0",
+    "@logto/cli": "workspace:^1.5.0",
     "@logto/connector-kit": "workspace:^1.1.1",
     "@logto/console": "workspace:*",
     "@logto/core-kit": "workspace:^2.0.0",
     "@logto/demo-app": "workspace:*",
     "@logto/language-kit": "workspace:^1.0.0",
-    "@logto/phrases": "workspace:^1.3.0",
+    "@logto/phrases": "workspace:^1.4.0",
     "@logto/phrases-ui": "workspace:^1.2.0",
-    "@logto/schemas": "workspace:^1.4.0",
+    "@logto/schemas": "workspace:^1.5.0",
     "@logto/shared": "workspace:^2.0.0",
     "@logto/ui": "workspace:*",
     "@silverhand/essentials": "^2.5.0",

packages/create/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 1.5.0
+
+### Patch Changes
+
+- @logto/cli@1.5.0
+
 ## 1.4.0
 
 ### Patch Changes

packages/create/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/create",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "author": "Silverhand Inc. <[email protected]>",
   "license": "MPL-2.0",
   "type": "module",
@@ -15,6 +15,6 @@
     "node": "^18.12.0"
   },
   "dependencies": {
-    "@logto/cli": "workspace:^1.4.0"
+    "@logto/cli": "workspace:^1.5.0"
   }
 }