Skip to content

chore: version packages - #87

Merged
ExorTek merged 4 commits into
masterfrom
chore/version-packages
Oct 25, 2026
Merged

ExorTek merged 4 commits into
masterfrom
chore/version-packages

Conversation

@ExorTek

@ExorTek ExorTek commented Oct 25, 2026

Copy link
Copy Markdown
Owner

Summary

Versions every pending changeset for the security-audit release, ahead of one npm publish.

Bump Packages
major challenge 2.0.0, crypto 2.0.0, jwe 2.0.0, jwt 2.0.0, magic-link 3.0.0, oauth2 2.0.0, oidc 2.0.0, opaque 2.0.0, paseto 2.0.0, passkey 2.0.0, password 2.0.0, security 2.0.0, session 2.0.0, auth 2.0.0
minor apikey 1.2.0, jws 1.1.0
patch jwk 1.0.5, jwks 1.1.2, otp 1.1.5, ua 1.0.4
  • auth gets its own major changeset because it re-exports the new majors; its CHANGELOG lists the migrations most likely to matter.
  • SECURITY.md lists the new supported major lines. This also corrects the stale magic-link row, which said 1.x while the package was already on 2.x.
  • scripts/deprecate.sh lists every package whose release carries a security fix (<new version). jwk and ua are not listed. The script runs after the publish.

Test plan

  • yarn build && yarn verify with REDIS_URL set: 2975 pass, 0 fail.
  • ./scripts/deprecate.sh dry run prints 18 entries.
  • After merge: Release workflow with dry_run: false, then scripts/releases.sh --apply and scripts/deprecate.sh --apply.

Every package whose release carries a security fix deprecates all
earlier versions. jwk and ua are left out: their releases have no
security-relevant change.
Copilot AI balanced review requested due to automatic review settings October 25, 2026 07:28

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

@ExorTek
ExorTek merged commit b898318 into master Oct 25, 2026
3 checks passed
@ExorTek
ExorTek deleted the chore/version-packages branch October 25, 2026 07:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants