Skip to content

chore(build-fix1): release root 0.4.0 #642

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

el-virt
Copy link
Contributor

@el-virt el-virt commented Jun 20, 2025

🤖 I have created a release beep boop

0.4.0 (2025-06-20)

Features

  • Add initial Dependency Review configuration (#587) (8f9d343)
  • Assertion signing key handling and verification in the CLI (#409) (242150b)
  • cli: Adds --allowList parameter to cli (#328) (297cec6)
  • cli: Adds --policyBinding ecdsa option (#352) (4e54c0d)
  • cli: Enables experimental ec in KAOs (#457) (203563c)
  • cli: Pass the platform url on decrypt, add the platform kas to the allowlist when fetching (#565) (5afd0d0)
  • core: Adds kao.schemaVersion (#416) (7925669)
  • core: KID in NanoTDF (#325) (6d01eff)
  • export connect rpc generated platform from package.json (#610) (cbd8a10)
  • lets nanoTDF client take options instead (#278) (048bd30)
  • lib: Bump for EC feature (#452) (6178877)
  • lib: generate ts code from platform protos (#280) (d88c612)
  • lib: Load abac config from policy service (#351) (48b2442)
  • lib: offline abac KAO configuration (#349) (6eb70c1)
  • lib: Updated error types (#362) (7fb29c5)
  • sdk: Adds OpenTDF.open method (#485) (6ba9044)
  • sdk: Adds opts for collection cache (#411) (47a5287)
  • sdk: Allow custom KAO array templates (#307) (fd1b386)
  • sdk: Allows skipping verification (#371) (8529461)
  • sdk: Assertion support (#350) (10ff5c7)
  • sdk: connect rpc client export (#545) (92de145)
  • sdk: ec-wrapped key support (#422) (9d4eab4)
  • sdk: Export AttributeObject and others (#487) (3d45ecf)
  • sdk: get KASes list from platform when allowedKases list is not passed (#557) (598c39f)
  • sdk: remove hex encoding for segment hash (#397) (ec4a55a)
  • sdk: sdk to use connect rpc calls (#596) (f8e54e5)
  • sdk: Updates to jose 6.x (#449) (9667747)

Bug Fixes

  • add ignoreAllowList flag (#331) (29a9b82)
  • Assertion verification key input (#412) (5be9bb1)
  • audit: npm audit fix (#304) (ca2dddd)
  • audit: npm audit fix (#318) (bc574f7)
  • Changes to make regex patterns more efficient, accurate and simpler (#376) (2fe2c43)
  • ci: Get platform_roundtrip working again (#413) (6ca50e6)
  • ci: ignore auto-formatting of proto-generated files (#296) (30fb685)
  • ci: use keycloack docker (#555) (dc4e48e)
  • cli: Better errors and properly set exit code in more cases (#418) (11ad526)
  • cli: Enables concurrent rewrap in cli (#391) (ab40664)
  • client: Normalize allowlist to origins (#321) (ac1f634)
  • core: npm audit fix (#380) (496f07c)
  • docs: Update README.md - remove outdated / incorrect quickstart links / ins… (#301) (2dbca15)
  • dpop: respect dpop disabled flag in oidc access token class methods (#299) (24319f7)
  • keySplitInfo Promise.any Promise.all (#379) (c6cdbef)
  • lib: Adds a 10 MiB cap to manifest size (#353) (e775ba5)
  • logs: Improves on decrypt unsafe fail (#303) (4efa118)
  • nano: Allow padding of kids (#338) (e1ae891)
  • nano: ecdsa policy binding support for encrypt (#346) (031bbb7)
  • nano: resource locator kid parse issue (#330) (4eef553)
  • nano: Store kid (#334) (63721f6)
  • Remove environment logging in vite.config.ts (#373) (d1e0a45)
  • Rewrap response handling typo (#372) (5add5aa)
  • sdk: bump koa from 2.15.4 to 2.16.1 in /lib (#534) (57c6d69)
  • sdk: bump uuid from 11.0.5 to 11.1.0 in /lib (#432) (3898e45)
  • sdk: Bump version no. to 0.3.2 (#536) (5924bc9)
  • sdk: calculate the length of ecdsa binding (#327) (69e0a81)
  • sdk: Disable concurrency on rewrap (#388) (beb3c06)
  • sdk: Don't set schemaV in older target specs (#531) (eed7545)
  • sdk: Enable support for more KAS key types (#624) (35c9777)
  • sdk: Fix assertion output for legacy mode (#533) (d54d777)
  • sdk: Fix for queries to older platforms (#570) (f6ccc10)
  • sdk: Fixes generating ztdf 4.2.2 output (#530) (ab42e5a)
  • sdk: Let pools take callables. (#390) (75ca10c)
  • sdk: Lets new API set nano binding type (#455) (26879ef)
  • sdk: npm audit fix (#410) (840fd29)
  • sdk: Remove AttributeSet (#489) (fa5a98d)
  • sdk: Remove stray call to node:Buffer (#365) (f851c02)
  • sdk: Removes ntdf version header (#488) (f657181)
  • sdk: Sets schemaVersion, not tdf_spec_version (#414) (74d326b)
  • sdk: support hex encoding signature hash for legacy sdk (#520) (b08158a)
  • sdk: Update ec-wrapped salt value (#464) (86142ba)
  • sdk: Updates preferred node to 22 (#408) (a173579)
  • sdk: Updates to eslint, and fixes from that (#423) (fa9271d)
  • sequential requests instead of promise.all (#339) (2e81fcb)
  • session.ts Prototype-polluting assignment (#377) (94993bc)
  • use new policy binding format (#312) (5e234ee)

This PR was generated with Release Please. See documentation.

@el-virt el-virt requested a review from a team as a code owner June 20, 2025 19:27
@el-virt el-virt requested a review from a team as a code owner June 20, 2025 19:27
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary of Changes

Hello @el-virt, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request represents the automated release of version 0.4.0 for the opentdf/web-sdk project. It consolidates a substantial collection of new features and critical bug fixes across the SDK, CLI, and core components, significantly enhancing the project's capabilities, stability, and compatibility. The changes aim to provide a more robust and feature-rich experience for users of the OpenTDF web SDK.

Highlights

  • Version Bump: This pull request performs an automated release, bumping the root project version and all associated packages (@opentdf/sdk, @opentdf/ctl, web-app) from 0.3.2 to 0.4.0.
  • New Features: A significant number of new features have been integrated, including enhanced assertion signing and verification, new CLI options (e.g., --allowList, --policyBinding ecdsa), experimental EC support in KAOs, improved platform URL handling, and various SDK enhancements like the OpenTDF.open method, custom KAO array templates, and support for connect RPC calls.
  • Bug Fixes and Improvements: Numerous bug fixes are included, addressing issues such as npm audit vulnerabilities, CI pipeline stability, regex pattern efficiency, concurrent rewrap handling, NanoTDF specific fixes (KID storage, ECDSA binding), and updates to dependency versions (e.g., jose 6.x, koa, uuid). Compatibility with older platforms and legacy SDK modes has also been improved.
  • Dependency and Build Updates: The PR updates internal version references across package.json files, Makefile, and version.ts, and generates a comprehensive CHANGELOG.md detailing all changes since the previous release.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in issue comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist is currently in preview and may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments to provide feedback.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request primarily updates version numbers across various package configuration files and the Makefile to 0.4.0, reflecting a new release. The changes appear consistent with the release objective. One minor observation is a hardcoded reference to the previous version (0.3.2) within the rebuild script in web-app/package.json (line 17), which ideally should be updated to 0.4.0 to ensure future consistency. However, as this specific line was not part of the direct changes in the provided diff, a line-specific comment cannot be made.

@el-virt el-virt closed this Jun 20, 2025
@el-virt el-virt deleted the release-please--branches--build-fix1--components--root branch June 20, 2025 19:46
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant