chore: vendor verified production SDK 0.1.0-beta.187

apps/extension/package.json

@@ -13,7 +13,7 @@
   },
   "dependencies": {
     "@fontsource-variable/source-serif-4": "^5.3.1",
-    "@mdbase-dev/sdk": "0.1.0-beta.186",
+    "@mdbase-dev/sdk": "0.1.0-beta.187",
     "@mdbase-dev/sdk-lab": "file:../../packages/connect/vendor/sdk-493d29ca-lab-beta157.tgz",
     "@mdbase-dev/sdk-staging": "file:../../packages/connect/vendor/sdk-493d29ca-staging-beta157.tgz",
     "@lingui/core": "6.10.1",

apps/reader/package.json

@@ -29,7 +29,7 @@
   },
   "dependencies": {
     "@fontsource-variable/source-serif-4": "^5.3.1",
-    "@mdbase-dev/sdk": "0.1.0-beta.186",
+    "@mdbase-dev/sdk": "0.1.0-beta.187",
     "@mdbase-dev/sdk-lab": "file:../../packages/connect/vendor/sdk-493d29ca-lab-beta157.tgz",
     "@mdbase-dev/sdk-staging": "file:../../packages/connect/vendor/sdk-493d29ca-staging-beta157.tgz",
     "@mdbase-dev/i18n": "0.1.0-beta.149",

apps/reader/scripts/reader-sdk.mjs

@@ -12,7 +12,7 @@ const vendor = "packages/connect/vendor/";
 const pins = {
   lab: ["@mdbase-dev/sdk-lab", "sdk-lab-beta157.json"],
   staging: ["@mdbase-dev/sdk-staging", "sdk-staging-beta157.json"],
-  production: ["@mdbase-dev/sdk", "sdk-production-beta186.json"],
+  production: ["@mdbase-dev/sdk", "sdk-production-beta187.json"],
 };
 const hash = (bytes) => createHash("sha256").update(bytes).digest("hex");
 

apps/reader/scripts/reader-sdk.test.mjs

@@ -36,7 +36,7 @@ test("all three original archives match installed bytes and packaged target trus
     const pkg = JSON.parse(await readFile(join(repo, "apps/reader/package.json"), "utf8"));
     const name = target === "production" ? "@mdbase-dev/sdk" : "@mdbase-dev/sdk-" + target;
     if (target === "production") {
-      assert.equal(pkg.dependencies[name], "0.1.0-beta.186");
+      assert.equal(pkg.dependencies[name], "0.1.0-beta.187");
     } else {
       assert.ok(pkg.dependencies[name].endsWith(sdk.receipt.artifact));
     }
@@ -76,7 +76,7 @@ test("archive tampering refuses before any SDK import", async (t) => {
 
 test("a rehashed production archive cannot masquerade as LAB", async (t) => {
   const { root, path, pin } = await fixture(t, "@mdbase-dev/sdk");
-  const production = "sdk-ec8da39a-production-beta186.tgz";
+  const production = "sdk-1907e67f-production-beta187.tgz";
   const bytes = await readFile(join(repo, vendor, production));
   await cp(join(repo, vendor, production), join(root, vendor, production));
   await writeFile(

packages/connect/package.json

@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "@mdbase-dev/connect": "0.1.0-beta.149",
-    "@mdbase-dev/sdk": "0.1.0-beta.186",
+    "@mdbase-dev/sdk": "0.1.0-beta.187",
     "@mdbase-reader/core": "workspace:*",
     "@mdbase-reader/migration": "workspace:*",
     "knap": "0.6.0",

packages/connect/vendor/sdk-production-beta187.json

@@ -0,0 +1,47 @@
+{
+  "schema": "mdbase-reader/sdk-original/1",
+  "artifact": "sdk-1907e67f-production-beta187.tgz",
+  "version": "0.1.0-beta.187",
+  "sourceCommit": "1907e67f26ece85f9c8b35bd99d4099d4e3f181a",
+  "environment": "production",
+  "bytes": 4807304,
+  "sha256": "00eb1395160907323bfcdc9e6689438bbb8b478ec2d1c4e1b79c421d2a940c8d",
+  "sri": "sha512-bNsqlaeBKwA5ig3e4WZaCBRKmnlJs/b1FB11pogNtb7ur/bQf8txlcJWawKU2Fjto5/7+8MYz9bZFzM7JOfK/Q==",
+  "publication": {
+    "repository": "mdbase-dev/mdbase-connect",
+    "workflow": ".github/workflows/publish-sdk-npm.yml",
+    "ref": "refs/tags/v0.1.0-beta.187",
+    "npm": "@mdbase-dev/sdk@0.1.0-beta.187",
+    "integrity": "sha512-bNsqlaeBKwA5ig3e4WZaCBRKmnlJs/b1FB11pogNtb7ur/bQf8txlcJWawKU2Fjto5/7+8MYz9bZFzM7JOfK/Q==",
+    "tarball": "https://registry.npmjs.org/@mdbase-dev/sdk/-/sdk-0.1.0-beta.187.tgz",
+    "attestations": "https://registry.npmjs.org/-/npm/v1/attestations/@mdbase-dev%2fsdk@0.1.0-beta.187"
+  },
+  "trust": {
+    "package": "@mdbase-dev/sdk",
+    "sha256": "7912e40838213e60b65848350d319a48019021317b112e3326429b250f0133d7",
+    "bytes": 840,
+    "cpOrigin": "https://connect.mdbase.dev",
+    "logOrigin": "https://log.mdbase.dev",
+    "sourceCommit": "36abd4b065be9495a7f5ae0808865a1f2279af04",
+    "sourceVersion": "0.1.0-beta.141"
+  },
+  "runtime": {
+    "sha256": "7004351583c3a79411e644fafe9f5786816d32ea058605d1905fd50666012f40",
+    "bytes": 3875815,
+    "maxBytes": 3875815,
+    "source": {
+      "repository": "mdbase-dev/mdbase-connect",
+      "commit": "aae332572834fbfa065c0f696017c0de3540649d"
+    }
+  },
+  "packagedTrustModuleSha256": "cf9690968d68b3c1eed2356ccfa2c72198b2f8cf07b9b24b1bb7be499b05bffb",
+  "bundledDependencies": [
+    {
+      "name": "@mdbase-dev/connect-protocol",
+      "member": "package/vendor/mdbase-dev-connect-protocol-0.1.0-beta.145-e6e66bcd172f.tgz",
+      "bytes": 106404,
+      "sha256": "e901144b8d93dc96fcf71d9d8f85dddbf647e9908913be21191c484e9224bb98"
+    }
+  ],
+  "package": "@mdbase-dev/sdk"
+}