Skip to content

Conversation

@el-virt
Copy link
Contributor

@el-virt el-virt commented Jun 19, 2025

🤖 I have created a release beep boop

0.4.0 (2025-06-20)

Features

  • Add initial Dependency Review configuration (#587) (8f9d343)
  • Assertion signing key handling and verification in the CLI (#409) (242150b)
  • cli: Adds --allowList parameter to cli (#328) (297cec6)
  • cli: Adds --policyBinding ecdsa option (#352) (4e54c0d)
  • cli: Enables experimental ec in KAOs (#457) (203563c)
  • cli: Pass the platform url on decrypt, add the platform kas to the allowlist when fetching (#565) (5afd0d0)
  • core: Adds kao.schemaVersion (#416) (7925669)
  • core: KID in NanoTDF (#325) (6d01eff)
  • export connect rpc generated platform from package.json (#610) (cbd8a10)
  • lets nanoTDF client take options instead (#278) (048bd30)
  • lib: Bump for EC feature (#452) (6178877)
  • lib: generate ts code from platform protos (#280) (d88c612)
  • lib: Load abac config from policy service (#351) (48b2442)
  • lib: offline abac KAO configuration (#349) (6eb70c1)
  • lib: Updated error types (#362) (7fb29c5)
  • sdk: Adds OpenTDF.open method (#485) (6ba9044)
  • sdk: Adds opts for collection cache (#411) (47a5287)
  • sdk: Allow custom KAO array templates (#307) (fd1b386)
  • sdk: Allows skipping verification (#371) (8529461)
  • sdk: Assertion support (#350) (10ff5c7)
  • sdk: connect rpc client export (#545) (92de145)
  • sdk: ec-wrapped key support (#422) (9d4eab4)
  • sdk: Export AttributeObject and others (#487) (3d45ecf)
  • sdk: get KASes list from platform when allowedKases list is not passed (#557) (598c39f)
  • sdk: remove hex encoding for segment hash (#397) (ec4a55a)
  • sdk: sdk to use connect rpc calls (#596) (f8e54e5)
  • sdk: Updates to jose 6.x (#449) (9667747)

Bug Fixes

  • add ignoreAllowList flag (#331) (29a9b82)
  • Assertion verification key input (#412) (5be9bb1)
  • audit: npm audit fix (#304) (ca2dddd)
  • audit: npm audit fix (#318) (bc574f7)
  • Changes to make regex patterns more efficient, accurate and simpler (#376) (2fe2c43)
  • ci: Get platform_roundtrip working again (#413) (6ca50e6)
  • ci: ignore auto-formatting of proto-generated files (#296) (30fb685)
  • ci: use keycloack docker (#555) (dc4e48e)
  • cli: Better errors and properly set exit code in more cases (#418) (11ad526)
  • cli: Enables concurrent rewrap in cli (#391) (ab40664)
  • client: Normalize allowlist to origins (#321) (ac1f634)
  • core: npm audit fix (#380) (496f07c)
  • docs: Update README.md - remove outdated / incorrect quickstart links / ins… (#301) (2dbca15)
  • dpop: respect dpop disabled flag in oidc access token class methods (#299) (24319f7)
  • keySplitInfo Promise.any Promise.all (#379) (c6cdbef)
  • lib: Adds a 10 MiB cap to manifest size (#353) (e775ba5)
  • logs: Improves on decrypt unsafe fail (#303) (4efa118)
  • nano: Allow padding of kids (#338) (e1ae891)
  • nano: ecdsa policy binding support for encrypt (#346) (031bbb7)
  • nano: resource locator kid parse issue (#330) (4eef553)
  • nano: Store kid (#334) (63721f6)
  • Remove environment logging in vite.config.ts (#373) (d1e0a45)
  • Rewrap response handling typo (#372) (5add5aa)
  • sdk: bump koa from 2.15.4 to 2.16.1 in /lib (#534) (57c6d69)
  • sdk: bump uuid from 11.0.5 to 11.1.0 in /lib (#432) (3898e45)
  • sdk: Bump version no. to 0.3.2 (#536) (5924bc9)
  • sdk: calculate the length of ecdsa binding (#327) (69e0a81)
  • sdk: Disable concurrency on rewrap (#388) (beb3c06)
  • sdk: Don't set schemaV in older target specs (#531) (eed7545)
  • sdk: Enable support for more KAS key types (#624) (35c9777)
  • sdk: Fix assertion output for legacy mode (#533) (d54d777)
  • sdk: Fix for queries to older platforms (#570) (f6ccc10)
  • sdk: Fixes generating ztdf 4.2.2 output (#530) (ab42e5a)
  • sdk: Let pools take callables. (#390) (75ca10c)
  • sdk: Lets new API set nano binding type (#455) (26879ef)
  • sdk: npm audit fix (#410) (840fd29)
  • sdk: Remove AttributeSet (#489) (fa5a98d)
  • sdk: Remove stray call to node:Buffer (#365) (f851c02)
  • sdk: Removes ntdf version header (#488) (f657181)
  • sdk: Sets schemaVersion, not tdf_spec_version (#414) (74d326b)
  • sdk: support hex encoding signature hash for legacy sdk (#520) (b08158a)
  • sdk: Update ec-wrapped salt value (#464) (86142ba)
  • sdk: Updates preferred node to 22 (#408) (a173579)
  • sdk: Updates to eslint, and fixes from that (#423) (fa9271d)
  • sequential requests instead of promise.all (#339) (2e81fcb)
  • session.ts Prototype-polluting assignment (#377) (94993bc)
  • use new policy binding format (#312) (5e234ee)

This PR was generated with Release Please. See documentation.

@el-virt el-virt requested review from a team as code owners June 19, 2025 04:54
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary of Changes

Hello @el-virt, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request represents an automated major version release, advancing the sdk, cli, and web-app components to version 0.4.0. The changes primarily involve updating version numbers across various configuration files and incorporating the comprehensive list of new features and bug fixes into the changelogs for each module.

Highlights

  • Automated Release: This pull request is an automated release, bumping the versions of the sdk, cli, and web-app modules to 0.4.0.
  • Changelog Updates: New changelog entries for version 0.4.0 have been added to the respective CHANGELOG.md files for each module, detailing numerous new features and bug fixes.
  • Dependency Management: The package.json and package-lock.json files for each module have been updated to reflect the new 0.4.0 versions, ensuring consistent dependency management.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in issue comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist is currently in preview and may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments to provide feedback.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@el-virt el-virt force-pushed the release-please--branches--build-fix1 branch from 01baf15 to 3c5df2a Compare June 19, 2025 04:55
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request automates the release of version 0.4.0 for the sdk, cli, and web-app packages. The changes primarily involve version bumps in package.json and package-lock.json files, updates to the release-please-manifest.json, and the generation of CHANGELOG.md files.

There are critical concerns regarding the baseline versions and inter-package dependencies that need to be addressed before this release can proceed:

  1. Previous Version Mismatch: For all three packages (lib/sdk, cli, web-app), the package.json and package-lock.json files indicate they are being updated from version 0.3.2. However, the PR description and the release-please-manifest.json state that the update is from version 0.3.3. This discrepancy suggests that the current branch might be based on an outdated state (pre-0.3.3) for these packages. This could lead to an incorrect release, potentially missing changes from v0.3.3. Please verify and ensure the release is built upon the correct v0.3.3 baseline for all packages.

  2. Outdated SDK Dependencies: The cli and web-app packages' package.json files (and consequently their package-lock.json files) still depend on an older version of @opentdf/sdk (specifically file:../lib/opentdf-sdk-0.3.2.tgz). Since @opentdf/sdk is being released as 0.4.0 in this same PR, these dependencies must be updated to point to the new 0.4.0 version of the SDK (e.g., file:../lib/opentdf-sdk-0.4.0.tgz or the equivalent, assuming the tgz filename includes the version). Releasing cli and web-app with dependencies on an old SDK version would be a significant issue. (Note: The lines declaring these dependencies are not part of the diffs in this PR, so specific line comments cannot be made here, but this is a critical aspect for the release's correctness.)

Additionally, there's a minor consistency issue:

  • The file .github/release-please/release-please-manifest.json is missing a trailing newline, while other JSON files in the project appear to follow this convention.

Please investigate these points to ensure a robust and correct release.

{
"name": "@opentdf/ctl",
"version": "0.3.2",
"version": "0.4.0",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The version in this package-lock.json is being bumped from 0.3.2 to 0.4.0 (also on line 9). However, the PR description and the release-please-manifest.json indicate that the cli package's previous version was 0.3.3. This discrepancy suggests the release might be based on an outdated commit for the cli package. Please verify the baseline for this release to ensure it correctly builds upon v0.3.3.

{
"name": "@opentdf/ctl",
"version": "0.3.2",
"version": "0.4.0",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The version is being updated from 0.3.2 to 0.4.0. However, the PR description and release-please-manifest.json suggest the previous version for the cli package was 0.3.3. This indicates a potential issue with the baseline commit for this release. It's crucial to ensure this release is correctly based on v0.3.3.

{
"name": "@opentdf/sdk",
"version": "0.3.2",
"version": "0.4.0",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

This package-lock.json shows the version for @opentdf/sdk changing from 0.3.2 to 0.4.0 (also on line 9). According to the PR description and release-please-manifest.json, the previous version was 0.3.3. This suggests the release might be based on an incorrect (outdated) commit for the lib (sdk) package. Please verify the baseline.

{
"name": "@opentdf/sdk",
"version": "0.3.2",
"version": "0.4.0",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The version for @opentdf/sdk is being updated from 0.3.2 to 0.4.0. The PR description and release-please-manifest.json indicate the previous version was 0.3.3. This discrepancy points to a potential issue with the baseline commit for this SDK release. Please ensure this release correctly builds upon v0.3.3.

{
"name": "web-app",
"version": "0.3.2",
"version": "0.4.0",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The version in this package-lock.json for web-app is changing from 0.3.2 to 0.4.0 (also on line 9). The PR description and release-please-manifest.json state the previous version was 0.3.3. This suggests the release might be based on an outdated commit for the web-app package. Please verify the baseline.

{
"name": "web-app",
"version": "0.3.2",
"version": "0.4.0",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The web-app version is being updated from 0.3.2 to 0.4.0. However, the PR description and release-please-manifest.json indicate the previous version was 0.3.3. This suggests a potential issue with the baseline commit for this release. Please ensure this release is correctly based on v0.3.3.

"lib": "0.4.0",
"cli": "0.4.0",
"web-app": "0.4.0"
}

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

This JSON file is missing a trailing newline. Other JSON files in the project (e.g., package.json files) appear to use trailing newlines. For consistency and to avoid potential issues with some tools or noisy diffs when lines are added later, it's recommended to add a trailing newline.

}

@el-virt el-virt changed the title chore(build-fix1): release chore(build-fix1): release 1.0.0 Jun 19, 2025
@el-virt el-virt force-pushed the release-please--branches--build-fix1 branch from 3c5df2a to 0c6f8c9 Compare June 19, 2025 05:18
@el-virt el-virt changed the title chore(build-fix1): release 1.0.0 chore(build-fix1): release 0.4.0 Jun 19, 2025
@el-virt el-virt force-pushed the release-please--branches--build-fix1 branch 2 times, most recently from 6de6518 to 85c8cd2 Compare June 19, 2025 21:14
@el-virt el-virt changed the title chore(build-fix1): release 0.4.0 chore(build-fix1): release Jun 20, 2025
@el-virt el-virt force-pushed the release-please--branches--build-fix1 branch from 85c8cd2 to 2a47a46 Compare June 20, 2025 18:32
@el-virt el-virt changed the title chore(build-fix1): release chore(build-fix1): release 0.4.0 Jun 20, 2025
@el-virt el-virt force-pushed the release-please--branches--build-fix1 branch from 2a47a46 to 8f87245 Compare June 20, 2025 19:53
@sonarqubecloud
Copy link

@el-virt el-virt closed this Jun 20, 2025
@el-virt el-virt deleted the release-please--branches--build-fix1 branch June 20, 2025 20:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants