Skip to content

chore: bump bulletin-deploy to 0.6.9 (stable)#20

Merged
UtkarshBhardwaj007 merged 1 commit intomainfrom
bump-bulletin-deploy-0.6.9
Apr 17, 2026
Merged

chore: bump bulletin-deploy to 0.6.9 (stable)#20
UtkarshBhardwaj007 merged 1 commit intomainfrom
bump-bulletin-deploy-0.6.9

Conversation

@UtkarshBhardwaj007
Copy link
Copy Markdown
Member

Summary

  • Bumps bulletin-deploy from 0.6.9-rc.60.6.9 (now released as stable).
  • Drop-in upgrade — our integration surface is unchanged. 147/147 tests pass.
  • Updates CLAUDE.md + README to drop "we're on an RC" wording and state the general "pin an explicit version, don't trust latest" rule.

What's in 0.6.9 since our rc.6 pin

Two substantive upstream commits:

  1. fix(dotns, #101) — Lite signers are now correctly rejected on NoStatus labels, matching the on-chain PopRules contract. Previously a Lite user could pass the classifier only to have the subsequent register() revert. Internal correctness fix.
  2. feat(dotns, #102) — New public DotNS.preflight(label) method, and bulletin-deploy's own deploy() now runs that preflight BEFORE opening the Bulletin WebSocket. Net effect: deploys doomed to fail DotNS registration (bad label, reserved base name, domain owned by someone else, unresolvable PoP gate) now abort with zero Bulletin bytes uploaded. Also exports simulateUserStatus and popStatusName helpers. Additive — no existing API changed.

Full release notes: https://github.com/paritytech/bulletin-deploy/releases/tag/v0.6.9

Breaking changes audit

None for us. We verified the four public APIs we depend on are still present and typed the same way:

  • deploy(content, domainName, options) — ✓
  • DotNS#connect(options) — ✓
  • DotNS#classifyName(label) — ✓
  • DotNS#checkOwnership(label, ownerAddress?) — ✓
  • DotNS#disconnect() — ✓

Our DeployOptions usage (rpc, signer, signerAddress, mnemonic, attributes) is a strict subset of what 0.6.9 accepts. We still don't pass jsMerkle: true (known-broken, falls back to Kubo binary) — unchanged.

Interplay with our own preflight

We already have our own checkDomainAvailability() that runs at domain-input time in the TUI (and before build in headless mode). bulletin-deploy 0.6.9's internal dotns.preflight() runs later in the pipeline — after the account-mapping check, before getProvider(). These are complementary:

  • Ours = eager, UX-friendly (catch before user confirms).
  • Theirs = defense in depth (catches edge cases that flip state between our check and the actual deploy).

No deduplication needed.

Test plan

  • pnpm install — clean install, lockfile updated
  • pnpm exec tsc --noEmit — clean
  • pnpm test — 17 files, 147 tests pass
  • pnpm format:check — clean
  • Smoke: dot deploy against an existing owned domain → "Already owned by you — will update the existing deployment"
  • Smoke: dot deploy with a Reserved name → aborts at availability check; no Bulletin bytes

Upstream 0.6.9 ships two changes since our 0.6.9-rc.6 pin:

* fix(dotns, #101) — Lite signers are now correctly rejected on NoStatus
  labels to match the on-chain PopRules contract. Closes a gap where the
  classifier would let a Lite user through only for register() to revert.
* feat(dotns, #102) — new public `DotNS.preflight(label)` + internal
  wiring inside `deploy()` so any deploy destined to fail DotNS aborts
  BEFORE the Bulletin upload starts ("zero Bulletin bytes paid"). Also
  exports `simulateUserStatus` and `popStatusName` helpers.

Our integration surface (`deploy()`, `DotNS.connect/classifyName/checkOwnership/
disconnect`) is untouched; this is drop-in for us. 147/147 tests pass, tsc
clean, format clean.

README + CLAUDE.md updated to reflect that we're on 0.6.9 stable (and the
general "pin explicitly, don't trust `latest`" rule). Changeset is a patch.
@github-actions
Copy link
Copy Markdown
Contributor

Dev build ready — try this branch:

curl -fsSL https://raw.githubusercontent.com/paritytech/playground-cli/main/install.sh | VERSION=dev/bump-bulletin-deploy-0.6.9 bash

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedbulletin-deploy@​0.6.9-rc.6 ⏵ 0.6.978 +1100100 +196 +1100

View full report

@UtkarshBhardwaj007 UtkarshBhardwaj007 merged commit 12363d9 into main Apr 17, 2026
5 checks passed
@UtkarshBhardwaj007 UtkarshBhardwaj007 deleted the bump-bulletin-deploy-0.6.9 branch April 17, 2026 16:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant