Skip to content

fix(security): remove outdated refs, broken links, and deprecated SDK usage#236

Merged
marc0olo merged 2 commits into
docs/security-portfrom
docs/security-outdated-refs
May 11, 2026
Merged

fix(security): remove outdated refs, broken links, and deprecated SDK usage#236
marc0olo merged 2 commits into
docs/security-portfrom
docs/security-outdated-refs

Conversation

@marc0olo
Copy link
Copy Markdown
Member

Summary

  • overview.md: Update 3 ANSSI Rust guide links to the restructured URL paths (introduction.html, unsafe/generalities.html, integer.html#chapter-integer, libraries.html#cargo-audit)
  • data-storage.md: Remove abandoned seniorjoinu/ic-stable-memory library (unmaintained since May 2023) and its caution block; rephrase intro to single remaining library; update encrypted notes example link from defunct motoko/encrypted-notes-dapp to rust/vetkeys/encrypted_notes_dapp_vetkd
  • decentralization.md: Remove LaunchTrail reference (spinner-cash/launchtrail, abandoned June 2022); remove basic_dao example link (path no longer exists on master)
  • canister-upgrades.md: Update both set_timer_interval links from ic-cdk/0.6.9 to ic-cdk-timers/1.0.0 (function moved crates)
  • data-integrity-and-authenticity.md: Migrate JavaScript client-side verification example from deprecated @dfinity/agent, @dfinity/candid, @dfinity/principal to @icp-sdk/core/agent, @icp-sdk/core/candid, @icp-sdk/core/principal; update HttpAgent, Certificate, and lookup_path APIs to v5; fix pre-existing start().await bug

Sync recommendation

sync from dfinity/portal building-apps/security/* — changes are fixes on top of the ported content; upstream source does not yet reflect the updated SDK or fixed links.

marc0olo added 2 commits May 11, 2026 17:15
- overview.md: update ANSSI Rust guide links to restructured URL paths
- data-storage.md: remove abandoned ic-stable-memory library, rephrase
  intro; update encrypted-notes-dapp link to vetkeys example path
- decentralization.md: remove LaunchTrail reference (abandoned 2022);
  remove basic_dao example link (path no longer exists on master)
- canister-upgrades.md: update set_timer_interval links from ic-cdk to
  ic-cdk-timers crate where the function now lives
Update the client-side certificate verification example in
data-integrity-and-authenticity.md to use the current @icp-sdk/core/*
packages instead of the deprecated @dfinity/* packages.

- Replace @dfinity/agent, @dfinity/candid, @dfinity/principal with
  @icp-sdk/core/agent, @icp-sdk/core/candid, @icp-sdk/core/principal
- Remove isomorphic-fetch (native fetch is used)
- HttpAgent: new HttpAgent() -> HttpAgent.create()
- Certificate: constructor + verify() -> Certificate.create() with
  principal: { canisterId } (auto-verifies, throws on failure)
- cert.lookup() -> cert.lookup_path()
- Drop .buffer coercions: Candid already returns Uint8Array
- Fix pre-existing bug: start().await -> await start()
@marc0olo marc0olo requested a review from a team as a code owner May 11, 2026 15:26
@marc0olo marc0olo merged commit ea48f09 into docs/security-port May 11, 2026
3 checks passed
@marc0olo marc0olo deleted the docs/security-outdated-refs branch May 11, 2026 15:44
marc0olo added a commit that referenced this pull request May 12, 2026
… usage (#236)

## Summary

- **overview.md**: Update 3 ANSSI Rust guide links to the restructured
URL paths (`introduction.html`, `unsafe/generalities.html`,
`integer.html#chapter-integer`, `libraries.html#cargo-audit`)
- **data-storage.md**: Remove abandoned `seniorjoinu/ic-stable-memory`
library (unmaintained since May 2023) and its caution block; rephrase
intro to single remaining library; update encrypted notes example link
from defunct `motoko/encrypted-notes-dapp` to
`rust/vetkeys/encrypted_notes_dapp_vetkd`
- **decentralization.md**: Remove LaunchTrail reference
(`spinner-cash/launchtrail`, abandoned June 2022); remove `basic_dao`
example link (path no longer exists on master)
- **canister-upgrades.md**: Update both `set_timer_interval` links from
`ic-cdk/0.6.9` to `ic-cdk-timers/1.0.0` (function moved crates)
- **data-integrity-and-authenticity.md**: Migrate JavaScript client-side
verification example from deprecated `@dfinity/agent`,
`@dfinity/candid`, `@dfinity/principal` to `@icp-sdk/core/agent`,
`@icp-sdk/core/candid`, `@icp-sdk/core/principal`; update `HttpAgent`,
`Certificate`, and `lookup_path` APIs to v5; fix pre-existing
`start().await` bug

## Sync recommendation

`sync from dfinity/portal building-apps/security/*` — changes are fixes
on top of the ported content; upstream source does not yet reflect the
updated SDK or fixed links.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant