chore(main): release 0.4.0

.github/release-please/release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.3.2"
+  ".": "0.4.0"
 }

CHANGELOG.md

@@ -0,0 +1,86 @@
+# Changelog
+
+## [0.4.0](https://github.com/opentdf/web-sdk/compare/v0.3.2...v0.4.0) (2025-06-26)
+
+
+### Features
+
+* Add initial Dependency Review configuration ([#587](https://github.com/opentdf/web-sdk/issues/587)) ([8f9d343](https://github.com/opentdf/web-sdk/commit/8f9d34373da1d5d01cfb58c064c108fac8503dfe))
+* Assertion signing key handling and verification in the CLI ([#409](https://github.com/opentdf/web-sdk/issues/409)) ([242150b](https://github.com/opentdf/web-sdk/commit/242150b69d2fd428ed4c6cab4d27b1d258ebe11a))
+* **cli:** Adds --allowList parameter to cli ([#328](https://github.com/opentdf/web-sdk/issues/328)) ([297cec6](https://github.com/opentdf/web-sdk/commit/297cec667ef3e87263ab9e58fae1482750009156))
+* **cli:** Adds `--policyBinding ecdsa` option ([#352](https://github.com/opentdf/web-sdk/issues/352)) ([4e54c0d](https://github.com/opentdf/web-sdk/commit/4e54c0d6d9cd6b6d1c05296cf954431970509367))
+* **cli:** Enables experimental ec in KAOs ([#457](https://github.com/opentdf/web-sdk/issues/457)) ([203563c](https://github.com/opentdf/web-sdk/commit/203563ce800f13bcf2efded7e499efae46debb99))
+* **cli:** Pass the platform url on decrypt, add the platform kas to the allowlist when fetching ([#565](https://github.com/opentdf/web-sdk/issues/565)) ([5afd0d0](https://github.com/opentdf/web-sdk/commit/5afd0d058f9111a8fef420ec560e0dcf4fde6007))
+* **core:** Adds kao.schemaVersion ([#416](https://github.com/opentdf/web-sdk/issues/416)) ([7925669](https://github.com/opentdf/web-sdk/commit/7925669cd6131e252147df126c6e1c0bedc3e0d0))
+* **core:** KID in NanoTDF ([#325](https://github.com/opentdf/web-sdk/issues/325)) ([6d01eff](https://github.com/opentdf/web-sdk/commit/6d01eff5bdf2f9fde688b3dab4e57470fb255c88))
+* export connect rpc generated platform from package.json ([#610](https://github.com/opentdf/web-sdk/issues/610)) ([cbd8a10](https://github.com/opentdf/web-sdk/commit/cbd8a10eb5e277c40b04e894f62bb3f53aa2a483))
+* get kas public key from base key ([#623](https://github.com/opentdf/web-sdk/issues/623)) ([5bde0a1](https://github.com/opentdf/web-sdk/commit/5bde0a10e82b3c431d801aa683d42b7911aed882))
+* lets nanoTDF client take options instead ([#278](https://github.com/opentdf/web-sdk/issues/278)) ([048bd30](https://github.com/opentdf/web-sdk/commit/048bd3063450dd56e6d9b749f9efd0fca451c6ee))
+* **lib:** Bump for EC feature ([#452](https://github.com/opentdf/web-sdk/issues/452)) ([6178877](https://github.com/opentdf/web-sdk/commit/6178877c8a307fe461f3ce348cb63a7204ccda45))
+* **lib:** generate ts code from platform protos ([#280](https://github.com/opentdf/web-sdk/issues/280)) ([d88c612](https://github.com/opentdf/web-sdk/commit/d88c612a8d7670ba16828c77662fe4f21dc8258c))
+* **lib:** Load abac config from policy service ([#351](https://github.com/opentdf/web-sdk/issues/351)) ([48b2442](https://github.com/opentdf/web-sdk/commit/48b24426c26ff56e0edb7d2e78eda34e844be135))
+* **lib:** offline abac KAO configuration ([#349](https://github.com/opentdf/web-sdk/issues/349)) ([6eb70c1](https://github.com/opentdf/web-sdk/commit/6eb70c1fdfc4e18308dbb898594fa773e1f2c7a8))
+* **lib:** Updated error types ([#362](https://github.com/opentdf/web-sdk/issues/362)) ([7fb29c5](https://github.com/opentdf/web-sdk/commit/7fb29c5ef519720f7d2c9c8e488e6246743e8d1c))
+* **sdk:** Adds OpenTDF.open method ([#485](https://github.com/opentdf/web-sdk/issues/485)) ([6ba9044](https://github.com/opentdf/web-sdk/commit/6ba90445b263bf8084b421faab742c93688446dd))
+* **sdk:** Adds opts for collection cache ([#411](https://github.com/opentdf/web-sdk/issues/411)) ([47a5287](https://github.com/opentdf/web-sdk/commit/47a528718dbffe999894ecdae904930919fcc9ed))
+* **sdk:** Allow custom KAO array templates ([#307](https://github.com/opentdf/web-sdk/issues/307)) ([fd1b386](https://github.com/opentdf/web-sdk/commit/fd1b38677b309083a54c0818b316d9e39d7aa649))
+* **sdk:** Allows skipping verification ([#371](https://github.com/opentdf/web-sdk/issues/371)) ([8529461](https://github.com/opentdf/web-sdk/commit/85294612fb6886fa4da6cf4d070c54168ed634de))
+* **sdk:** Assertion support ([#350](https://github.com/opentdf/web-sdk/issues/350)) ([10ff5c7](https://github.com/opentdf/web-sdk/commit/10ff5c7b940a1287cb2dfbbaeee50ba58d0b85a7))
+* **sdk:** connect rpc client export ([#545](https://github.com/opentdf/web-sdk/issues/545)) ([92de145](https://github.com/opentdf/web-sdk/commit/92de1451cc18c9385d35331dafa4b078e7a1736b))
+* **sdk:** ec-wrapped key support ([#422](https://github.com/opentdf/web-sdk/issues/422)) ([9d4eab4](https://github.com/opentdf/web-sdk/commit/9d4eab46de11bbbe8bc660149fad245853d18e94))
+* **sdk:** Export AttributeObject and others ([#487](https://github.com/opentdf/web-sdk/issues/487)) ([3d45ecf](https://github.com/opentdf/web-sdk/commit/3d45ecfa07f27ba62d47a416a056481a7b5d859e))
+* **sdk:** get KASes list from platform when allowedKases list is not passed ([#557](https://github.com/opentdf/web-sdk/issues/557)) ([598c39f](https://github.com/opentdf/web-sdk/commit/598c39f2bccb4eb2a0f19143cf1d47d07bd65232))
+* **sdk:** remove hex encoding for segment hash ([#397](https://github.com/opentdf/web-sdk/issues/397)) ([ec4a55a](https://github.com/opentdf/web-sdk/commit/ec4a55a2890375b7dd5be61dafa93b505e54be7b))
+* **sdk:** sdk to use connect rpc calls ([#596](https://github.com/opentdf/web-sdk/issues/596)) ([f8e54e5](https://github.com/opentdf/web-sdk/commit/f8e54e5ff0a5775a2e7c3e487d1f16b227231583))
+* **sdk:** Updates to jose 6.x ([#449](https://github.com/opentdf/web-sdk/issues/449)) ([9667747](https://github.com/opentdf/web-sdk/commit/966774769a674d65b5a32e002687f08104844732))
+
+
+### Bug Fixes
+
+* add ignoreAllowList flag ([#331](https://github.com/opentdf/web-sdk/issues/331)) ([29a9b82](https://github.com/opentdf/web-sdk/commit/29a9b82e98bd99c95a59288949ff182103c09a05))
+* Assertion verification key input ([#412](https://github.com/opentdf/web-sdk/issues/412)) ([5be9bb1](https://github.com/opentdf/web-sdk/commit/5be9bb11bb73b5859ea7f18a6309dd70e93dc94a))
+* **audit:** npm audit fix ([#304](https://github.com/opentdf/web-sdk/issues/304)) ([ca2dddd](https://github.com/opentdf/web-sdk/commit/ca2dddd189970ed368e1f9213a15e3eaafb3dde3))
+* **audit:** npm audit fix ([#318](https://github.com/opentdf/web-sdk/issues/318)) ([bc574f7](https://github.com/opentdf/web-sdk/commit/bc574f7878e5583b90ca5bab2f80a1a111df7b99))
+* Changes to make regex patterns more efficient, accurate and simpler ([#376](https://github.com/opentdf/web-sdk/issues/376)) ([2fe2c43](https://github.com/opentdf/web-sdk/commit/2fe2c43ee3c481f6f40eba11a50e0ab8155ea024))
+* **ci:** Get platform_roundtrip working again ([#413](https://github.com/opentdf/web-sdk/issues/413)) ([6ca50e6](https://github.com/opentdf/web-sdk/commit/6ca50e6f3b2d945c98993190784a78e960438d8f))
+* **ci:** ignore auto-formatting of proto-generated files ([#296](https://github.com/opentdf/web-sdk/issues/296)) ([30fb685](https://github.com/opentdf/web-sdk/commit/30fb6858d16ed488e6e5eed2ee38700782261d61))
+* **ci:** use keycloack docker ([#555](https://github.com/opentdf/web-sdk/issues/555)) ([dc4e48e](https://github.com/opentdf/web-sdk/commit/dc4e48e571b3c3fcd0f29c6e26c4814d1e0acc61))
+* **cli:** Better errors and properly set exit code in more cases ([#418](https://github.com/opentdf/web-sdk/issues/418)) ([11ad526](https://github.com/opentdf/web-sdk/commit/11ad526ed29f8c334d1d048dacd8302795ce5589))
+* **cli:** Enables concurrent rewrap in cli ([#391](https://github.com/opentdf/web-sdk/issues/391)) ([ab40664](https://github.com/opentdf/web-sdk/commit/ab40664e5b0fb26b9056066fdb6fa2224ffd74a5))
+* **client:** Normalize allowlist to origins ([#321](https://github.com/opentdf/web-sdk/issues/321)) ([ac1f634](https://github.com/opentdf/web-sdk/commit/ac1f634df2db559f895ac1317dad8c5af14da680))
+* **core:** npm audit fix ([#380](https://github.com/opentdf/web-sdk/issues/380)) ([496f07c](https://github.com/opentdf/web-sdk/commit/496f07ca7029ded39bd0c71a59f1c7220dd419c1))
+* **docs:** Update README.md - remove outdated / incorrect quickstart links / ins… ([#301](https://github.com/opentdf/web-sdk/issues/301)) ([2dbca15](https://github.com/opentdf/web-sdk/commit/2dbca15deb0b590055c70a4ba93b828cd27ee3d1))
+* **dpop:** respect dpop disabled flag in oidc access token class methods ([#299](https://github.com/opentdf/web-sdk/issues/299)) ([24319f7](https://github.com/opentdf/web-sdk/commit/24319f72c70ee30a1a242c0e37d0d775eca91604))
+* keySplitInfo Promise.any Promise.all ([#379](https://github.com/opentdf/web-sdk/issues/379)) ([c6cdbef](https://github.com/opentdf/web-sdk/commit/c6cdbefc5c2cffda0c8a70972ee115e60112bfa4))
+* **lib:** Adds a 10 MiB cap to manifest size ([#353](https://github.com/opentdf/web-sdk/issues/353)) ([e775ba5](https://github.com/opentdf/web-sdk/commit/e775ba5b7d9fca7f91ce9a50650d4e69a03711bc))
+* **logs:** Improves on decrypt unsafe fail ([#303](https://github.com/opentdf/web-sdk/issues/303)) ([4efa118](https://github.com/opentdf/web-sdk/commit/4efa118a0d307ea08d6b941670d610d82cb4af50))
+* **nano:** Allow padding of kids ([#338](https://github.com/opentdf/web-sdk/issues/338)) ([e1ae891](https://github.com/opentdf/web-sdk/commit/e1ae8912617869e298325df57f4888e5fe3a14a6))
+* **nano:** ecdsa policy binding support for encrypt ([#346](https://github.com/opentdf/web-sdk/issues/346)) ([031bbb7](https://github.com/opentdf/web-sdk/commit/031bbb7154a638c3b0c55ea58369af3182414f94))
+* **nano:** resource locator kid parse issue ([#330](https://github.com/opentdf/web-sdk/issues/330)) ([4eef553](https://github.com/opentdf/web-sdk/commit/4eef553dc5a779637c1ea8567b27d411524643f3))
+* **nano:** Store kid ([#334](https://github.com/opentdf/web-sdk/issues/334)) ([63721f6](https://github.com/opentdf/web-sdk/commit/63721f634bb1bb4b3cfd91343eff67fdabd7e603))
+* Remove environment logging in vite.config.ts ([#373](https://github.com/opentdf/web-sdk/issues/373)) ([d1e0a45](https://github.com/opentdf/web-sdk/commit/d1e0a4538e2f5ba58d42dbad3754131b6a533612))
+* Rewrap response handling typo ([#372](https://github.com/opentdf/web-sdk/issues/372)) ([5add5aa](https://github.com/opentdf/web-sdk/commit/5add5aa1be96abf08c15573080e8e8e537e939f8))
+* **sdk:** bump koa from 2.15.4 to 2.16.1 in /lib ([#534](https://github.com/opentdf/web-sdk/issues/534)) ([57c6d69](https://github.com/opentdf/web-sdk/commit/57c6d69862c577d5b459cb57edf8865f87c75dab))
+* **sdk:** bump uuid from 11.0.5 to 11.1.0 in /lib ([#432](https://github.com/opentdf/web-sdk/issues/432)) ([3898e45](https://github.com/opentdf/web-sdk/commit/3898e4513ade1a1c5a1799ef58bef249f02bb14f))
+* **sdk:** Bump version no. to 0.3.2 ([#536](https://github.com/opentdf/web-sdk/issues/536)) ([5924bc9](https://github.com/opentdf/web-sdk/commit/5924bc9f3cdb694b8f1be8ddd53f1b59e4f96115))
+* **sdk:** calculate the length of ecdsa binding ([#327](https://github.com/opentdf/web-sdk/issues/327)) ([69e0a81](https://github.com/opentdf/web-sdk/commit/69e0a8156f747c27aa185f0cb22498b0a9ed8e53))
+* **sdk:** Disable concurrency on rewrap ([#388](https://github.com/opentdf/web-sdk/issues/388)) ([beb3c06](https://github.com/opentdf/web-sdk/commit/beb3c0644683549b0c6eaf6858b27c6222512e35))
+* **sdk:** Don't set schemaV in older target specs ([#531](https://github.com/opentdf/web-sdk/issues/531)) ([eed7545](https://github.com/opentdf/web-sdk/commit/eed7545fca60e94123697adca151b470c1719be4))
+* **sdk:** Enable support for more KAS key types ([#624](https://github.com/opentdf/web-sdk/issues/624)) ([35c9777](https://github.com/opentdf/web-sdk/commit/35c977767f6b7291d2b6d96e803cac45d71ddcd2))
+* **sdk:** Fix assertion output for legacy mode ([#533](https://github.com/opentdf/web-sdk/issues/533)) ([d54d777](https://github.com/opentdf/web-sdk/commit/d54d777ada207d82c99672dd9ab9d82b1a3fb8ce))
+* **sdk:** Fix for queries to older platforms ([#570](https://github.com/opentdf/web-sdk/issues/570)) ([f6ccc10](https://github.com/opentdf/web-sdk/commit/f6ccc106747027e8e01f4074d270402f047e464a))
+* **sdk:** Fixes generating ztdf 4.2.2 output ([#530](https://github.com/opentdf/web-sdk/issues/530)) ([ab42e5a](https://github.com/opentdf/web-sdk/commit/ab42e5a1f8463d6cbc18695f53c56b3403950fdd))
+* **sdk:** Let pools take callables. ([#390](https://github.com/opentdf/web-sdk/issues/390)) ([75ca10c](https://github.com/opentdf/web-sdk/commit/75ca10c018dc61fdc9f3892c40a6b14daed2f4c2))
+* **sdk:** Lets new API set nano binding type ([#455](https://github.com/opentdf/web-sdk/issues/455)) ([26879ef](https://github.com/opentdf/web-sdk/commit/26879ef9e81dbe5b8daff065c2ad7ef433072669))
+* **sdk:** npm audit fix ([#410](https://github.com/opentdf/web-sdk/issues/410)) ([840fd29](https://github.com/opentdf/web-sdk/commit/840fd297a419d5fa402e68bed04b45698d2d5214))
+* **sdk:** Remove AttributeSet ([#489](https://github.com/opentdf/web-sdk/issues/489)) ([fa5a98d](https://github.com/opentdf/web-sdk/commit/fa5a98dcceacd0c92554c5822780a8300f2b29d7))
+* **sdk:** Remove stray call to node:Buffer ([#365](https://github.com/opentdf/web-sdk/issues/365)) ([f851c02](https://github.com/opentdf/web-sdk/commit/f851c026455c6d6389c02f11cef478c2e08345c4))
+* **sdk:** Removes ntdf version header ([#488](https://github.com/opentdf/web-sdk/issues/488)) ([f657181](https://github.com/opentdf/web-sdk/commit/f657181c63a23a83876b689d42b9910d9937420a))
+* **sdk:** Sets schemaVersion, not tdf_spec_version ([#414](https://github.com/opentdf/web-sdk/issues/414)) ([74d326b](https://github.com/opentdf/web-sdk/commit/74d326b940049e9e9943648cd71ade723d16522d))
+* **sdk:** support hex encoding signature hash for legacy sdk ([#520](https://github.com/opentdf/web-sdk/issues/520)) ([b08158a](https://github.com/opentdf/web-sdk/commit/b08158ae258b8e9bc65cad4b3cf64031de5d8f5b))
+* **sdk:** Update ec-wrapped salt value ([#464](https://github.com/opentdf/web-sdk/issues/464)) ([86142ba](https://github.com/opentdf/web-sdk/commit/86142baef4992ebe3e2245435fc97e896a65380a))
+* **sdk:** Updates preferred node to 22 ([#408](https://github.com/opentdf/web-sdk/issues/408)) ([a173579](https://github.com/opentdf/web-sdk/commit/a1735793a1129045d4e7db61d99edd5d66b8d911))
+* **sdk:** Updates to eslint, and fixes from that ([#423](https://github.com/opentdf/web-sdk/issues/423)) ([fa9271d](https://github.com/opentdf/web-sdk/commit/fa9271d9dc32d6b8c27f6c83c71cb512b8430d99))
+* sequential requests instead of promise.all ([#339](https://github.com/opentdf/web-sdk/issues/339)) ([2e81fcb](https://github.com/opentdf/web-sdk/commit/2e81fcb2d75f0d5bfbf0fc683e8dabf0cb3cf00d))
+* session.ts Prototype-polluting assignment ([#377](https://github.com/opentdf/web-sdk/issues/377)) ([94993bc](https://github.com/opentdf/web-sdk/commit/94993bc856bdb447d7e4b382ac7449cbce0f5f3d))
+* use new policy binding format ([#312](https://github.com/opentdf/web-sdk/issues/312)) ([5e234ee](https://github.com/opentdf/web-sdk/commit/5e234ee0ae013e91b98bf6ca7341377e12565ca4))

Makefile

@@ -1,6 +1,6 @@
 
 # x-release-please-start-version
-version=0.3.2
+version=0.4.0
 # x-release-please-end
 extras=cli web-app
 pkgs=lib $(extras)

cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opentdf/ctl",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "description": "Node based CLI for opentdf",
   "repository": {
     "type": "git",
@@ -51,7 +51,7 @@
     "typescript-eslint": "^8.26.0"
   },
   "dependencies": {
-    "@opentdf/sdk": "file:../lib/opentdf-sdk-0.3.2.tgz",
+    "@opentdf/sdk": "file:../lib/opentdf-sdk-0.4.0.tgz",
     "yargs": "^17.7.2"
   }
 }

lib/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opentdf/sdk",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "description": "OpenTDF for the Web",
   "homepage": "https://github.com/opentdf/web-sdk",
   "bugs": {

lib/src/version.ts

@@ -1,7 +1,7 @@
 /**
  * Exposes the released version number of the `@opentdf/sdk` package
  */
-export const version = '0.3.2'; // x-release-please-version
+export const version = '0.4.0'; // x-release-please-version
 
 /**
  * A string name used to label requests as coming from this library client.

version.txt

@@ -1 +1 @@
-0.3.2
+0.4.0

web-app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "web-app",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "license": "BSD-3-Clause-Clear",
   "type": "module",
   "scripts": {
@@ -14,10 +14,10 @@
     "preview": "vite preview",
     "test": "vite build && vitest",
     "test:ui": "vite build && vitest --ui",
-    "rebuild": "npm remove @opentdf/sdk && npm add file:../lib/opentdf-sdk-0.3.2.tgz && npm run dev"
+    "rebuild": "npm remove @opentdf/sdk && npm add file:../lib/opentdf-sdk-0.4.0.tgz && npm run dev"
   },
   "dependencies": {
-    "@opentdf/sdk": "file:../lib/opentdf-sdk-0.3.2.tgz",
+    "@opentdf/sdk": "file:../lib/opentdf-sdk-0.4.0.tgz",
     "clsx": "^2.1.1",
     "native-file-system-adapter": "^3.0.1",
     "react": "^19.0.0",