From 11144e2909bf7f734d0aa5e1f058c7d469443fbd Mon Sep 17 00:00:00 2001 From: "David I. Lehn" Date: Wed, 4 Feb 2026 20:01:58 -0500 Subject: [PATCH 1/4] Test on and use Node.js 24.x. --- .github/workflows/main.yml | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 6f1862c8..adeccdac 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -8,11 +8,11 @@ jobs: timeout-minutes: 10 strategy: matrix: - node-version: [22.x] + node-version: [24.x] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: ${{ matrix.node-version }} - run: npm install @@ -24,11 +24,11 @@ jobs: timeout-minutes: 10 strategy: matrix: - node-version: [20.x, 22.x] + node-version: [20.x, 22.x, 24.x] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: ${{ matrix.node-version }} - run: npm install @@ -40,11 +40,11 @@ jobs: timeout-minutes: 10 strategy: matrix: - node-version: [22.x] + node-version: [24.x] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: ${{ matrix.node-version }} - run: npm install @@ -56,18 +56,18 @@ jobs: timeout-minutes: 10 strategy: matrix: - node-version: [22.x] + node-version: [24.x] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: ${{ matrix.node-version }} - run: npm install - name: Generate coverage report run: npm run coverage-ci - name: Upload coverage to Codecov - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v5 with: file: ./coverage/lcov.info fail_ci_if_error: true From 3febe8b78fb2f300d30a4402b249dd71d2ef65c2 Mon Sep 17 00:00:00 2001 From: "David I. Lehn" Date: Wed, 4 Feb 2026 20:04:01 -0500 Subject: [PATCH 2/4] Fix most zizmor issues. --- .github/workflows/main.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index adeccdac..62b3f45e 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -2,6 +2,8 @@ name: Node.js CI on: [push] +permissions: {} + jobs: lint: runs-on: ubuntu-latest @@ -11,6 +13,8 @@ jobs: node-version: [24.x] steps: - uses: actions/checkout@v6 + with: + persist-credentials: false - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v6 with: @@ -27,6 +31,8 @@ jobs: node-version: [20.x, 22.x, 24.x] steps: - uses: actions/checkout@v6 + with: + persist-credentials: false - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v6 with: @@ -43,6 +49,8 @@ jobs: node-version: [24.x] steps: - uses: actions/checkout@v6 + with: + persist-credentials: false - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v6 with: @@ -59,6 +67,8 @@ jobs: node-version: [24.x] steps: - uses: actions/checkout@v6 + with: + persist-credentials: false - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v6 with: From c56dba28f4a82f288c4a8d5febd6dcc915684c14 Mon Sep 17 00:00:00 2001 From: "David I. Lehn" Date: Wed, 4 Feb 2026 20:38:36 -0500 Subject: [PATCH 3/4] Update dependencies. - Update dependencies: - `jsonld@9`. - `jsonld-signatures@11.6.0`. - **NOTE**: The `jsonld` updates may have rare edge case compatibility issues. The important related indirect `rdf-canonize` issues were addressed with other existing minor version updates. - Move `ed25519-signature-2018-context` to `devDependencies`. --- CHANGELOG.md | 13 +++++++++++++ package.json | 6 +++--- 2 files changed, 16 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1982c2bb..c87709c7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,18 @@ # @digitalbazaar/vc ChangeLog +## 7.3.0 - 2026-02-xx + +### Changed +- Update dependencies: + - `jsonld@9`. + - `jsonld-signatures@11.6.0`. +- **NOTE**: The `jsonld` updates may have rare edge case compatibility issues. + The important related indirect `rdf-canonize` issues were addressed with + other existing minor version updates. + +### Fixed +- Move `ed25519-signature-2018-context` to `devDependencies`. + ## 7.2.0 - 2025-04-14 ### Added diff --git a/package.json b/package.json index 2d8bcfa3..37b39bd3 100644 --- a/package.json +++ b/package.json @@ -29,9 +29,8 @@ ], "dependencies": { "@digitalbazaar/credentials-context": "^3.2.0", - "ed25519-signature-2018-context": "^1.1.0", - "jsonld": "^8.3.3", - "jsonld-signatures": "^11.5.0" + "jsonld": "^9.0.0", + "jsonld-signatures": "^11.6.0" }, "devDependencies": { "@digitalbazaar/bbs-2023-cryptosuite": "^2.0.1", @@ -55,6 +54,7 @@ "cross-env": "^7.0.3", "did-context": "^3.1.1", "did-veres-one": "^16.1.1", + "ed25519-signature-2018-context": "^1.1.0", "eslint": "^8.57.1", "eslint-config-digitalbazaar": "^5.2.0", "eslint-plugin-jsdoc": "^50.6.8", From 918d7ac55a81e4a18539e114a7bc97065bc55b3c Mon Sep 17 00:00:00 2001 From: "David I. Lehn" Date: Thu, 5 Feb 2026 18:04:53 -0500 Subject: [PATCH 4/4] Update dev dependencies. --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 37b39bd3..484f02cf 100644 --- a/package.json +++ b/package.json @@ -42,9 +42,9 @@ "@digitalbazaar/did-method-key": "^5.2.0", "@digitalbazaar/did-method-web": "^1.0.1", "@digitalbazaar/ecdsa-multikey": "^1.8.0", - "@digitalbazaar/ecdsa-rdfc-2019-cryptosuite": "^1.2.0", + "@digitalbazaar/ecdsa-rdfc-2019-cryptosuite": "^1.3.0", "@digitalbazaar/ecdsa-sd-2023-cryptosuite": "^3.4.1", - "@digitalbazaar/ed25519-signature-2018": "^4.1.0", + "@digitalbazaar/ed25519-signature-2018": "^4.2.0", "@digitalbazaar/ed25519-verification-key-2018": "^4.0.0", "@digitalbazaar/multikey-context": "^2.0.1", "@digitalbazaar/odrl-context": "^1.0.0",