digiid-ts, branch v3.0.1[MIRROR] A modern TypeScript implementation of the Digi-ID authentication protocolhttps://git.zelu.dev/digiid-ts/atom?h=v3.0.12026-06-30T12:49:39Zchore: exclude test typings from release package2026-06-30T12:49:39ZPawel Zelawskipawel@pzelawski.com2026-06-30T12:49:39Zurn:sha1:b08f5f7bf7ccaafdb0d964e8dd04594988a5e3cachore: release v3.0.1 with Vite security fixes2026-06-30T12:44:32ZPawel Zelawskipawel@pzelawski.com2026-06-30T12:44:32Zurn:sha1:59c69a611d6bd1308cd32a9a0cd6f9065622c71dchore!: upgrade deps/tooling, fix postcss vulnerability, and require Node >=20.19.02026-05-23T08:07:34ZPawel Zelawskipawel@pzelawski.com2026-05-23T08:07:34Zurn:sha1:63805760ab36357bbd8d67aa3c510e894785335fchore: patch fast-uri security vulnerabilities2026-05-15T16:55:55ZPawel Zelawskipawel@pzelawski.com2026-05-15T16:55:55Zurn:sha1:3f3521cf5dad43dc537e6a56e469ccf73ae41927chore: bump version to 2.0.3, patch security vulnerabilities in vite and lodash2026-04-18T15:03:41ZPawel Zelawskipawel@pzelawski.com2026-04-18T15:03:41Zurn:sha1:c333c7daecb0bb6a026d26844dbf57c2665051d7fix: resolve Rollup path traversal vulnerability (CVE)2026-03-01T12:29:50ZPawel Zelawskipawel.zelawski@outlook.com2026-03-01T12:29:50Zurn:sha1:49f83b48196fbc260979f4a808328a34992b12c5
- Upgrade rollup from 4.40.0 to 4.59.0 via npm override
- Fix Rollup arbitrary file write vulnerability via path traversal
- Upgrade minimatch to 10.2.3 to fix ReDoS vulnerabilities
- All security vulnerabilities resolved (0 vulnerabilities)
- Tests and build verified working
chore: release v2.0.12026-01-23T11:29:59ZPawel Zelawskipawel.zelawski@outlook.com2026-01-23T11:29:59Zurn:sha1:aee3b086b739c7256c33a8a8ddcf50fa96188cd0
- Fixed signature verification by correcting message hash calculation
- Removed extra length byte before DigiBytes message prefix
- Enhanced public key recovery with all 4 recovery IDs
- Resolved all security vulnerabilities (removed elliptic dependency)
- All tests passing
chore: update package-lock.json2026-01-23T11:22:10ZPawel Zelawskipawel.zelawski@outlook.com2026-01-23T11:22:10Zurn:sha1:611089aa50e1d7301fa66de1aa205c398862634echore: bump version to 2.0.1-beta.22026-01-23T11:21:11ZPawel Zelawskipawel.zelawski@outlook.com2026-01-23T11:21:11Zurn:sha1:f0fc931d178acf5569632234ad3b7b1c5419ebc8fix: correct message hashing for signature verification2026-01-23T11:19:10ZPawel Zelawskipawel.zelawski@outlook.com2026-01-23T11:19:10Zurn:sha1:431497920652a37d2bcb9704a6465a7c474922eb
- Fixed hashMessage function to not add extra length byte before message prefix
- The prefix '\x19DigiByte Signed Message:\n' already contains the length indicator
- Enhanced public key recovery to try all 4 recovery IDs for better compatibility
- Verified with both beta.0 and beta.1 test data
- All tests passing