Skip to content

v0.25.0

Choose a tag to compare

@github-actions github-actions released this 29 May 06:39
· 12 commits to main since this release

v0.25.0

⚠️ Breaking changes

  • Removed serviceToken from EncryptOptions, DecryptOptions, and the query option types.
  • Removed the CtsToken public type export.
  • Auth environment updated for stack-auth 0.36: CS_REGION is dropped in favour of CS_WORKSPACE_CRN.

✨ Added

  • newClient now accepts an optional opts.strategy (an AuthStrategy, @cipherstash/auth-shaped object) on both Node and WASM. When supplied, getToken() is invoked on every ZeroKMS request. On WASM the strategy is required (no env/filesystem fallback); on Node it is optional and falls back to the AutoStrategy built from credentials / profile.

🔧 Fixed

  • Node: capture a per-isolate Neon Channel for the JS-backed strategy, and unref it so scripts can exit cleanly after a round trip.
  • Node: wrap the getToken JS call in Context::try_catch so a strategy that throws (or otherwise misbehaves) surfaces as a clean error instead of an unhandled rejection.

🧱 Changed

  • Bumped cipherstash-client, cts-common, stack-auth, and stack-profile to 0.36.0.
  • Expanded integration coverage: JS-backed auth contract, event-loop-exit, and newClient guard tests.

Upgrading: remove any serviceToken options and CtsToken imports; set CS_WORKSPACE_CRN instead of CS_REGION.

Full changelog: https://github.com/cipherstash/protectjs-ffi/blob/main/CHANGELOG.md