diff --git a/apps/writer/package.json b/apps/writer/package.json index 5b0ac76..004d99b 100644 --- a/apps/writer/package.json +++ b/apps/writer/package.json @@ -49,7 +49,7 @@ "@mdbase-dev/connect": "0.1.0-beta.149", "@mdbase-dev/connect-protocol": "file:vendor/mdbase-dev-connect-protocol-0.1.0-beta.145-e6e66bcd172f.tgz", "@mdbase-dev/i18n": "0.1.0-beta.176", - "@mdbase-dev/sdk": "0.1.0-beta.183", + "@mdbase-dev/sdk": "0.1.0-beta.186", "@mdbase-dev/sdk-lab": "file:../../vendor/sdk-lab-beta157.tgz", "@mdbase-dev/sdk-staging": "file:../../vendor/sdk-staging-beta157.tgz", "@mdbase-dev/ui": "0.1.0-beta.176", diff --git a/apps/writer/scripts/writer-sdk.mjs b/apps/writer/scripts/writer-sdk.mjs index 6428725..5660fba 100644 --- a/apps/writer/scripts/writer-sdk.mjs +++ b/apps/writer/scripts/writer-sdk.mjs @@ -21,7 +21,7 @@ const hash = (bytes) => createHash("sha256").update(bytes).digest("hex"); export const writerSdkPins = Object.freeze({ lab: "sdk-lab-beta157.json", staging: "sdk-staging-beta157.json", - production: "sdk-production-beta183.json", + production: "sdk-production-beta186.json", }); /** Installed package names to try, in order. The plain name comes first so a diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index ce8d53c..946d831 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -69,8 +69,8 @@ importers: specifier: 0.1.0-beta.176 version: 0.1.0-beta.176(@lingui/core@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0))(@lingui/react@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0)(react@19.3.0))(babel-plugin-macros@3.1.0)(react@19.3.0)(rolldown@1.2.11)(supports-color@7.2.0) '@mdbase-dev/sdk': - specifier: 0.1.0-beta.183 - version: 0.1.0-beta.183 + specifier: 0.1.0-beta.186 + version: 0.1.0-beta.186 '@mdbase-dev/sdk-lab': specifier: file:../../vendor/sdk-lab-beta157.tgz version: file:vendor/sdk-lab-beta157.tgz @@ -79,7 +79,7 @@ importers: version: file:vendor/sdk-staging-beta157.tgz '@mdbase-dev/ui': specifier: 0.1.0-beta.176 - version: 0.1.0-beta.176(@codemirror/commands@6.11.1)(@codemirror/language@6.12.4)(@codemirror/state@6.7.6)(@codemirror/view@6.43.13)(@lezer/common@1.5.3)(@lingui/core@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0))(@lingui/react@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0)(react@19.3.0))(@mdbase-dev/i18n@0.1.0-beta.176(@lingui/core@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0))(@lingui/react@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0)(react@19.3.0))(babel-plugin-macros@3.1.0)(react@19.3.0)(rolldown@1.2.11)(supports-color@7.2.0))(@mdbase-dev/sdk@0.1.0-beta.183)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) + version: 0.1.0-beta.176(@codemirror/commands@6.11.1)(@codemirror/language@6.12.4)(@codemirror/state@6.7.6)(@codemirror/view@6.43.13)(@lezer/common@1.5.3)(@lingui/core@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0))(@lingui/react@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0)(react@19.3.0))(@mdbase-dev/i18n@0.1.0-beta.176(@lingui/core@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0))(@lingui/react@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0)(react@19.3.0))(babel-plugin-macros@3.1.0)(react@19.3.0)(rolldown@1.2.11)(supports-color@7.2.0))(@mdbase-dev/sdk@0.1.0-beta.186)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) '@mdbase-writer/core': specifier: workspace:* version: link:../../packages/core @@ -616,8 +616,8 @@ packages: bundledDependencies: - '@mdbase-dev/connect-protocol' - '@mdbase-dev/sdk@0.1.0-beta.183': - resolution: {integrity: sha512-ft2iyM3i0n888hSmtjxx2PdBq++yy1hJVXasrwTkVODCFkxAmBM7qbedH4DuJDRQyFmJP32vIgjDXu+fuTysww==} + '@mdbase-dev/sdk@0.1.0-beta.186': + resolution: {integrity: sha512-Oy3J0hxDKrCq4G+O5wZMke6LzWUDrLxIf9rRTMqUPlUOg7sBNX4go7M+fDMCzx/YjlnDAvkM89pK2qitYFBi2Q==} engines: {node: '>=20'} bundledDependencies: - '@mdbase-dev/connect-protocol' @@ -2368,13 +2368,13 @@ snapshots: '@noble/curves': 2.4.0 '@noble/hashes': 2.4.0 - '@mdbase-dev/sdk@0.1.0-beta.183': + '@mdbase-dev/sdk@0.1.0-beta.186': dependencies: '@noble/ciphers': 2.4.0 '@noble/curves': 2.4.0 '@noble/hashes': 2.4.0 - '@mdbase-dev/ui@0.1.0-beta.176(@codemirror/commands@6.11.1)(@codemirror/language@6.12.4)(@codemirror/state@6.7.6)(@codemirror/view@6.43.13)(@lezer/common@1.5.3)(@lingui/core@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0))(@lingui/react@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0)(react@19.3.0))(@mdbase-dev/i18n@0.1.0-beta.176(@lingui/core@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0))(@lingui/react@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0)(react@19.3.0))(babel-plugin-macros@3.1.0)(react@19.3.0)(rolldown@1.2.11)(supports-color@7.2.0))(@mdbase-dev/sdk@0.1.0-beta.183)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@mdbase-dev/ui@0.1.0-beta.176(@codemirror/commands@6.11.1)(@codemirror/language@6.12.4)(@codemirror/state@6.7.6)(@codemirror/view@6.43.13)(@lezer/common@1.5.3)(@lingui/core@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0))(@lingui/react@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0)(react@19.3.0))(@mdbase-dev/i18n@0.1.0-beta.176(@lingui/core@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0))(@lingui/react@6.9.0(@babel/core@7.29.7(supports-color@7.2.0))(babel-plugin-macros@3.1.0)(react@19.3.0))(babel-plugin-macros@3.1.0)(react@19.3.0)(rolldown@1.2.11)(supports-color@7.2.0))(@mdbase-dev/sdk@0.1.0-beta.186)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': dependencies: '@fontsource/azeret-mono': 5.3.0 '@fontsource/ibm-plex-sans': 5.3.0 @@ -2388,7 +2388,7 @@ snapshots: '@codemirror/state': 6.7.6 '@codemirror/view': 6.43.13 '@lezer/common': 1.5.3 - '@mdbase-dev/sdk': 0.1.0-beta.183 + '@mdbase-dev/sdk': 0.1.0-beta.186 react-dom: 19.3.0(react@19.3.0) '@messageformat/date-skeleton@1.1.0': {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 0007d0f..5ad69d8 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -9,7 +9,7 @@ minimumReleaseAgeExclude: - '@mdbase-dev/connect-dev@0.1.0-beta.149' - '@mdbase-dev/ui@0.1.0-beta.176' - '@mdbase-dev/i18n@0.1.0-beta.176' - - '@mdbase-dev/sdk@0.1.0-beta.183' + - '@mdbase-dev/sdk@0.1.0-beta.186' onlyBuiltDependencies: - esbuild diff --git a/tests/writer-sdk-intake.test.mjs b/tests/writer-sdk-intake.test.mjs index 795f3ad..7a7f254 100644 --- a/tests/writer-sdk-intake.test.mjs +++ b/tests/writer-sdk-intake.test.mjs @@ -13,14 +13,14 @@ const metadata=bytes=>JSON.parse(/^const metadata = (\{.*\});$/m.exec(bytes.toSt const member=(archive,path)=>execFileSync('tar',['-xOf',resolve(root,'vendor',archive),`package/dist/${path}`],{maxBuffer:8_000_000}); test('production npm archive and installed SDK match the authenticated release',async()=>{ - const pin=JSON.parse(await read('vendor/sdk-production-beta183.json')); - assert.equal(pin.sha256,'566d7d0d8183bf9d4db2d576787ca737aa3b4c034c119e41b11240290407f787'); - assert.equal(pin.sourceCommit,'0d79b57ffcf71b7e9d144649ae80e088190a615b'); + const pin=JSON.parse(await read('vendor/sdk-production-beta186.json')); + assert.equal(pin.sha256,'dcf5e4b5345d34e020891dbc564c754c7558231f6a3fb8a3b9b20b1f88de6df0'); + assert.equal(pin.sourceCommit,'ec8da39ae2fcaaf1c6f3f8484fb2df76a4c61a59'); assert.equal(hash(await read(`vendor/${pin.artifact}`)),pin.sha256); const pkg=JSON.parse(await read('apps/writer/package.json')); const target=process.env.VITE_MDBASE_ENV==='staging'?'staging':'production'; const archive=pin.artifact; - assert.equal(pkg.dependencies['@mdbase-dev/sdk'],'0.1.0-beta.183'); + assert.equal(pkg.dependencies['@mdbase-dev/sdk'],'0.1.0-beta.186'); const original=member(pin.artifact,'application/packaged-trust.js'); assert.equal(hash(original),pin.packagedTrustModuleSha256); assert.deepEqual(await read('apps/writer/node_modules/@mdbase-dev/sdk/dist/application/packaged-trust.js'),member(archive,'application/packaged-trust.js')); diff --git a/vendor/sdk-ec8da39a-production-beta186.tgz b/vendor/sdk-ec8da39a-production-beta186.tgz new file mode 100644 index 0000000..624474b Binary files /dev/null and b/vendor/sdk-ec8da39a-production-beta186.tgz differ diff --git a/vendor/sdk-production-beta186.json b/vendor/sdk-production-beta186.json new file mode 100644 index 0000000..8a4020b --- /dev/null +++ b/vendor/sdk-production-beta186.json @@ -0,0 +1,47 @@ +{ + "schema": "tnapp/production-sdk-original/1", + "artifact": "sdk-ec8da39a-production-beta186.tgz", + "version": "0.1.0-beta.186", + "sourceCommit": "ec8da39ae2fcaaf1c6f3f8484fb2df76a4c61a59", + "environment": "production", + "bytes": 4801450, + "sha256": "dcf5e4b5345d34e020891dbc564c754c7558231f6a3fb8a3b9b20b1f88de6df0", + "sri": "sha512-Oy3J0hxDKrCq4G+O5wZMke6LzWUDrLxIf9rRTMqUPlUOg7sBNX4go7M+fDMCzx/YjlnDAvkM89pK2qitYFBi2Q==", + "publication": { + "repository": "mdbase-dev/mdbase-connect", + "workflow": ".github/workflows/publish-sdk-npm.yml", + "ref": "refs/tags/v0.1.0-beta.186", + "npm": "@mdbase-dev/sdk@0.1.0-beta.186", + "integrity": "sha512-Oy3J0hxDKrCq4G+O5wZMke6LzWUDrLxIf9rRTMqUPlUOg7sBNX4go7M+fDMCzx/YjlnDAvkM89pK2qitYFBi2Q==", + "tarball": "https://registry.npmjs.org/@mdbase-dev/sdk/-/sdk-0.1.0-beta.186.tgz", + "attestations": "https://registry.npmjs.org/-/npm/v1/attestations/@mdbase-dev%2fsdk@0.1.0-beta.186" + }, + "trust": { + "package": "@mdbase-dev/sdk", + "sha256": "7912e40838213e60b65848350d319a48019021317b112e3326429b250f0133d7", + "bytes": 840, + "cpOrigin": "https://connect.mdbase.dev", + "logOrigin": "https://log.mdbase.dev", + "sourceCommit": "36abd4b065be9495a7f5ae0808865a1f2279af04", + "sourceVersion": "0.1.0-beta.141" + }, + "runtime": { + "sha256": "6fca774a331cb457912e2e3ec53452cb5a4edda9d54213a33e7b58fa73226f1a", + "bytes": 3872491, + "maxBytes": 3872491, + "source": { + "repository": "mdbase-dev/mdbase-connect", + "commit": "efa183f510ca188b855b65351b74d91641c415ef" + } + }, + "packagedTrustModuleSha256": "cf9690968d68b3c1eed2356ccfa2c72198b2f8cf07b9b24b1bb7be499b05bffb", + "bundledDependencies": [ + { + "name": "@mdbase-dev/connect-protocol", + "member": "package/vendor/mdbase-dev-connect-protocol-0.1.0-beta.145-e6e66bcd172f.tgz", + "bytes": 106404, + "sha256": "e901144b8d93dc96fcf71d9d8f85dddbf647e9908913be21191c484e9224bb98" + } + ], + "package": "@mdbase-dev/sdk" +}