web5-js icon indicating copy to clipboard operation
web5-js copied to clipboard

Bump @sphereon/pex from 2.1.0 to 3.3.3 in /packages/credentials

Open dependabot[bot] opened this issue 1 month ago • 2 comments

Bumps @sphereon/pex from 2.1.0 to 3.3.3.

Release notes

Sourced from @​sphereon/pex's releases.

const boolean support in filters and optional field support in Fields

  • Updated:
    • Allow to use const boolean in filters.
    • Allow to use 'optional' boolean in V2 Fields object. Please be aware we do not take that value into account yet. We just added the field, so it doesn't fail validation
    • Update to PEX models 2.2.4

Performance improvement and jwt_vp_json

  • Added:
    • Significant performance improvement: Add cache for AJV field validation as the operation is expensive and can be called multiple times. The improvement is in the order of 10 times or higher especially when larger definitions are encountered
    • Expose jwt_vp_json format
  • Updated:
    • Update to PEX models 2.2.2

DataIntegrity Proof, AnonCreds 2023 support

  • Added: Support for Data Integrity Proofs, using Anoncreds 2023 format.

Initial support for SD-JWT

  • Added:
    • Initial support for Selective Disclosure JWTs (SD-JWT). API is mostly the same, but to be sure we released it as a new major version
  • Updated:
    • Update to latest pex-models, containing some definition updates
  • Fixed:
    • Fix evaluation rule All when there are no marked input descriptors

No changes, updated deps

No changes except from some updated dependencies

Changelog

Sourced from @​sphereon/pex's changelog.

v3.3.3 - 2024-04-25

  • Fixed:
    • const boolean value was missing in schema file

v3.3.2 - 2024-04-24

  • Updated:
    • Allow to use const boolean in filters.
    • Allow to use 'optional' boolean in V2 Fields object. Please be aware we do not take that value into account yet. We just added the field, so it doesn't fail validation
    • Update to PEX models 2.2.4

v3.3.1 - 2024-03-19

  • Updated:
    • Update sd-jwt packages to 0.6.1 from 0.3.0
    • Update to latest @​sphereon/ssi-types
    • Move to pnpm from yarn, given our other libraries also use pnpm

v3.3.0 - 2024-02-29

  • Added:
    • Significant performance improvement: Add cache for AJV field validation as the operation is expensive and can be called multiple times. The improvement is in the order of 10 times or higher especially when larger definitions are encountered
    • Expose jwt_vp_json format
  • Updated:
    • Update to PEX models 2.2.2

v3.2.0 - 2024-02-05

  • Added:
    • Support for Data Integrity Proofs, using Anoncreds 2023 format.

v3.1.0 - 2024-02-02

  • Updated:
    • Update to PEX models 2.2.0 which adds support for Verifiable Credential Data Integrity 1.0
  • Fixed:
    • Do not use path nested for sd-jwt
    • In the wild a presentation submission sometimes comes in as a double stringified JSON and thus string format. We detect and fix that, also providing a warning

v3.0.1 - 2024-01-19

  • Updated:
    • SD-JWT dependency updated to 0.2.0
    • SSS types updated to 0.18.1

... (truncated)

Commits
  • 8807a92 chore(release): 3.3.3
  • c56f8a1 chore(release): 3.3.3
  • d559c84 Merge pull request #156 from TimoGlastra/fix-const-boolean-value
  • 08ba4fd fix: const boolean value
  • c15fe2a Merge pull request #155 from TimoGlastra/cost-value-tests
  • 0fcfe01 test: const value tests
  • 5347e30 chore: next dev cycle
  • 88c0088 chore: v3.3.2
  • 1e1998d feat: Add optional property to field. Partially fixes #150
  • 7455153 Merge pull request #151 from TimoGlastra/feat/support-const-boolean
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot[bot] avatar May 20 '24 09:05 dependabot[bot]