build(deps): update dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@sphereon/pex	2.2.0 -> 2.2.2					dependencies	patch
@sphereon/pex-models	2.1.1 -> 2.2.4					dependencies	minor
@sphereon/ssi-types	^0.17.0 -> ^0.28.0					dependencies	minor
@types/chai (source)	4.3.9 -> 4.3.16					devDependencies	patch
@types/chai-as-promised (source)	7.1.7 -> 7.1.8					devDependencies	patch
@types/chance (source)	1.1.5 -> 1.1.6					devDependencies	patch
@types/deep-equal-in-any-order (source)	1.0.2 -> 1.0.3					devDependencies	patch
@types/elliptic (source)	6.4.16 -> 6.4.18					devDependencies	patch
@types/lodash (source)	4.14.200 -> 4.17.7					dependencies	minor
@types/pako (source)	2.0.2 -> 2.0.3					devDependencies	patch
@types/promise.allsettled (source)	1.0.5 -> 1.0.6					devDependencies	patch
@types/sinon-chai (source)	3.2.11 -> 3.2.12					devDependencies	patch
@types/sjcl (source)	1.0.32 -> 1.0.34					dependencies	patch
@types/sjcl (source)	1.0.32 -> 1.0.34					devDependencies	patch
@types/wait-on (source)	5.3.3 -> 5.3.4					devDependencies	patch
axios (source)	^0.27.2 -> ^0.28.0					dependencies	minor
chai (source)	4.3.10 -> 4.5.0					devDependencies	minor
chai-as-promised	7.1.1 -> 7.1.2					devDependencies	patch
chance (source)	1.1.11 -> 1.1.12					devDependencies	patch
dotenv	16.3.1 -> 16.4.5					devDependencies	minor
ec-key	0.0.4 -> 0.0.6					dependencies	patch
eciesjs	0.4.5 -> 0.4.7					dependencies	patch
elliptic	6.5.4 -> 6.5.6					dependencies	patch
eslint (source)	8.52.0 -> 8.57.0					devDependencies	minor
joi	17.11.0 -> 17.13.3					dependencies	minor
nock	13.3.7 -> 13.5.4					devDependencies	minor
prettier-plugin-solidity	1.1.3 -> 1.3.1					devDependencies	minor
styfle/cancel-workflow-action	0.12.0 -> 0.12.1					action	patch
ts-loader	9.5.0 -> 9.5.1					devDependencies	patch
ts-node (source)	10.9.1 -> 10.9.2					devDependencies	patch
typedoc (source)	^0.25.0 -> ^0.26.0					devDependencies	minor
typedoc-plugin-markdown (source)	3.16.0 -> 3.17.1					devDependencies	minor
webpack	5.89.0 -> 5.93.0					devDependencies	minor

---

Release Notes

Sphereon-Opensource/pex (@​sphereon/pex)

v2.2.2

• Updated:
  • Updated pex-model deps
  • Added more logic to deduce holder(s) for a VP
• Fixed:
  • Logic when to generate a presentation submission was incorrect

Sphereon-Opensource/pex-openapi (@​sphereon/pex-models)

v2.2.4

Compare Source

• Fix
  • Add boolean 'optional' property in v2 Fields,

v2.2.3

Compare Source

• Fix
  • Add boolean const as valid filter value

v2.2.2

Compare Source

• Fix
  • Format did not include jwt_vp_json

v2.2.1

Compare Source

v2.2.0

• Feature
  • Add support for Verifiable Credential Data Integrity 1.0

v2.1.5

Compare Source

• Fix
  • Schema object was renamed to DefintionSchema by accident

v2.1.4

Compare Source

Do not use

v2.1.3

Compare Source

• Fix
  • path is now required in a Field according to the v1 and v2 spec

v2.1.2

Compare Source

• Feature
  • Add support for vc+sd-jwt formats

Sphereon-OpenSource/ssi-sdk (@​sphereon/ssi-types)

v0.28.0

Compare Source

Bug Fixes

• Add ebsi plugin schema (422cf14)
• Ensure we always use the ES256 key for EBSI auth (be7dc15)
• Make sure we do not use the jwk thumbprint as kid default value when not in EBSI (c4a22aa)
• Make sure we do not use the jwk thumbprint as kid default value when not in EBSI (9a3bf56)
• Make sure we search for display and legal name based on issuer metadata name as well (9a4cafd)

Features

• Allow to pass in additional keys for EBSI (16aa9e2)

v0.27.0

Compare Source

Bug Fixes

• added a guard to check the issuerBranding (c6d8de2)
• extract PD name & purpose from definitionPayload (9573ced)
• fixed addIssuerBranding step (3008b11)
• fixed addIssuerBranding step after adding identity (17aa278)
• remove execution of loading env files (1937c14)

Features

• Add JWKS hosting per DID (70e41d7)
• added addIssuerBranding step to the vci machine (6fba515)
• added branding as an optional parameter to the party (0b46c70)
• Allow EBSI attestation client to be the start of a regular VCI flow (afffd39)
• Callback listeeners (fce3670)
• EBSI access token, attestation and DID support (bed66b4)
• EBSI DID registraiton/management (7195786)
• EBSI headless attestation credentials (6b6ad14)
• fixes after merge, modified some comment and prettier (daebd26)
• Get the authorization URL from a TI using a cloud/service wallet when requesting a particular attestation credential (222c4d4)
• implement Oid4VP authorization token support (5fdbd65)
• Introduce EBSI attestation service to get VCs, for instance to onboard (59f1809)
• Siopv2Holder module implementing xstate Siopv2Machine (7dd0651)

v0.26.0

Compare Source

Bug Fixes

• a bug in migration CreateContacts (0267460)
• a bug in selecting the type of the credential that we're going to request (c49b237)
• clientId fixes (4fc568b)
• clientId fixes (cad41fc)
• Fixed broken tests (d01859d)
• Make sure we import path/fs only when really needed for object-creation. Ensure we use agent-config plugin only in places it is needed (76b4f53)
• updated vci package and fixed getSupportedCredential function (780a377)
• updated version of vci and fixed the libs for it (ceb6074)
• updated version of vci and fixed the libs for it (de1d6aa)

Features

• Adapted the plugin to accept https urls, added tests and documentation about the changes (73ab5ae)
• allow default auth request options for VCI links/machines, like clientId and redirectUri (434196e)
• Allow to pass in options when emitting link handler events (0293342)
• Allow to pass in state for url handler handle methods, allowing a statemachine to continue, without database persistence (16e06e8)
• Run prettier (2a9be95)
• Support http(s) urls (b3cc812)
• Updated dependencies on the @​sphereon/oid4vci (00810ff)

v0.25.0

Compare Source

Bug Fixes

• Ensure logger is initialized early preventing potential issues when importing from other libraries (eae66f2)
• fix physical address building name validation (b3508c0)
• Order of static keys to ensure default namespace key is available when creating the default logger (dc56df2)
• removed not null constraint from the SQL statement that adds the origin column (95929d1)

Features

• (WIP) added ownerId, tenantId, and origin. (d9b8623)
• added pd-manager / pd-store (ed77532)
• added sd-jwt plugin (85d8aeb)
• Added the StudentEntity and refactored the migrations (fb36a51)

v0.24.0

Compare Source

Bug Fixes

• enum fixes (dc3fb0d)

Features

• added deactivateDidEndpoint function according to decentralized-identity's universal-registrar and renamed previous method as deleteDidEndpoint and marked it as deprecated (39a6601)
• expose contact manager methods for rest implementation (37bbfd2)
• updated oid4vci-holder to support full flow (63be076)

0.23.4 (2024-04-25)

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

0.23.2 (2024-04-25)

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

0.23.1 (2024-04-25)

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

v0.23.4

Compare Source

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

v0.23.0

Compare Source

Bug Fixes

• add PhysicalAddress migrations to postgres (afd441c)
• added default value to PartyType.origin (8b9d5d2)
• adjust PhysicalAddress postgres migration to follow code standards (b8540fe)
• Allowing null values of enum type column (a4bc42b)
• Fixed origin column name (d7a6ec1)
• made party origin mandatory in the *Args types (d8e8560)
• rework fix to include missing table in existing migration (0862dbd)
• set uri to nullable in Party table (38318ae)

Features

• add kb-jwt to sd-jwt (e066f2b)
• Added PartyOriginEnum to PartyType, wrote migrations and updated tests and updated the contact manager plugin (07d8c1f)

v0.22.0

Compare Source

Features

• Add option noStateMachinePersistence to VCI link handler to skip state machine persistence (315b076)

0.21.1 (2024-04-04)

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

v0.21.1

Compare Source

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

v0.21.0

Compare Source

Bug Fixes

• changed the logic for getting validFrom (7a7940b)
• fixed failing test cases and added more test cases for getting data from the raw data (6f5b50b)
• fixed import (cf67a50)
• fixed XStatePersistence plugin and fixed the tests (56d8f18)
• refactored UniformCredential names to digitalCredential, added utility methods for getting the credential document type (a0c5530)
• Resume OID4VCI with linkhandler and auth code flow was broken (654cef4)
• Use response_uri instead of redirect_uri (9c7c9ef)

Features

• (WIP) added tenant aware credential store (db68113)
• Add rest client mode to xstate-machine-persistence, allowing to process local events but delegate the execution to a REST server (02c5e12)
• Add support to automatically cleanup on final states, as well as to cleanup all other instances when starting a machine (484fc21)
• Add support to create DID on demand when talking to RP with SIOP (68a6dee)
• Add support to start and resume xstate statemachines, with automatic persistence on state changes (f6baae0)
• added pagination to digital credential store (ecefdcf)
• added tenant aware credential store (312698e)
• added unit tests and refactored plugin methods (31eac66)
• Allow to use a customInstanceId as well as an existingInstanceId, so we can differentiate between re-using an existing machine and using a custom id (3aeb93d)
• Basic structure of plugin created (16160de)
• Created migrations and refactored the database layer (8672b82)
• upgrade SD-JWT package (6563973)

Reverts

• Revert "chore: Make sure plugins having listener methods, actually expose the interface" (99db568)
• Remove BBS support. (205e0db)

BREAKING CHANGES

• Remove BBS support. Upstream support for Windows and RN is missing. Needs to be revisited at a later point in time

v0.19.0

Compare Source

Bug Fixes

• changed image-size library version to a react friendly one (308bad7)
• changed the image-size usage to handle uint8array (1a0e080)
• fixed the svg problem with image-size (d7823eb)
• Instead of figuring out the proof format, we defaulted to JWT credentials if the format was not supplied, bypassing the detection code (8cba122)
• JWT VP sometimes was constructed as a JSON LD VP with JwtProof2020 (abb012c)
• modified handling svg files in ssi-sdk.core (c86188e)
• Several JWT Verifiable Presentation fixes, like missing kid, iat, exp values. Also include a holder in the vp payload, as some RPs require it, although it is optional for a JWT (30d8c54)
• VCI holder agent plugin credential and branding storage fixes (901ff44)

Features

• Add initial OID4VP ID2 support (85325ae)
• added oid4vci-holder plugin (e8507d4)
• added physical and electronic addresses to contact-manager (76f78b3)
• added remote-server-rest-api (0076160)
• Allow i18n for JSONLD credentials (1ce843e)
• Allow to pass in nonce when creating the auth request URI (82f82ef)
• Correct submission_data when send in incorrectly as string (c5d6b76)
• event-logger improvements (a3fdcd2)
• Reuse existing PEX for performance (9c8966c)
• Support selecting did methods from aud claim of request. (0bfc03d)

Reverts

• Revert "chore: update deps" (f83aee5)

0.18.1 (2024-01-19)

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

v0.18.1

Compare Source

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

v0.18.0

Compare Source

Bug Fixes

• added ssi-sdk.core to data-store tsconfig plus added exposed query function to enablePostgresUuidExtension signature (cb5d8cb)
• added WithTypeOrmQuery type to core module and renamed enableUuidv4 to enablePostgresUuidExtension (9bfb597)
• document added (80112ec)
• export enablePostgresUuidExtension and WithTypeOrmQuery to core exports (5161837)
• refactored usages of enablePostgresUuidExtension to accept queryRunner as the main param (3654a8a)

Features

• Add bearer token support using callback function (4528881)
• Add static bearer token callback function option (2d5cd5a)
• added enableUuidv4 to data-store exports (d7c1237)
• ssi-types: add kid to cnf (0fb3886)
• ssi-types: sd-jwt support (b9154a0)

Reverts

• Revert "chore: update deps" (a1cd971)

0.17.5 (2023-10-01)

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

0.17.4 (2023-10-01)

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

0.17.3 (2023-09-30)

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

0.17.2 (2023-09-30)

Note: Version bump only for package @​sphereon/sphereon-sdk.workspace

0.17.1 (2023-09-28)

Bug Fixes

• update deps to fix an issue with VCI offer ids not mapping on issuer metadata (aa6f98c)

axios/axios (axios)

v0.28.1

Compare Source

v0.28.0

Compare Source

Release notes:

Bug Fixes

• fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#​6091)

Backports from v1.x:

• Allow null indexes on formSerializer and paramsSerializer v0.x (#​4961)
• Fixing content-type header repeated #​4745
• Fixed timeout error message for HTTP 4738
• Added axios.formToJSON method (#​4735)
• URL params serializer (#​4734)
• Fixed toFormData Blob issue on node>v17 #​4728
• Adding types for progress event callbacks #​4675
• Fixed max body length defaults #​4731
• Added data URL support for node.js (#​4725)
• Added isCancel type assert (#​4293)
• Added the ability for the url-encoded-form serializer to respect the formSerializer config (#​4721)
• Add string[] to AxiosRequestHeaders type (#​4322)
• Allow type definition for axios instance methods (#​4224)
• Fixed AxiosError stack capturing; (#​4718)
• Fixed AxiosError status code type; (#​4717)
• Adding Canceler parameters config and request (#​4711)
• fix(types): allow to specify partial default headers for instance creation (#​4185)
• Added blob to the list of protocols supported by the browser (#​4678)
• Fixing Z_BUF_ERROR when no content (#​4701)
• Fixed race condition on immediate requests cancellation (#​4261)
• Added a clear() function to the request and response interceptors object so a user can ensure that all interceptor

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}