Skip to content

Feature/jss 110 security pin all versions v8 #950

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 20 commits into
base: naga
Choose a base branch
from
+7,660 −12,830
Open

Feature/jss 110 security pin all versions v8 #950

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
3da6e5a
fix(package.json): update build scripts to use pnpm instead of yarn
Ansonhkg Oct 14, 2025
30464b4
fix(package): pin all versions
Ansonhkg Oct 14, 2025
341e8fb
chore(package): update lock file
Ansonhkg Oct 14, 2025
846670b
chore(package.json): remove packageManager field
Ansonhkg Oct 14, 2025
8303606
fmt
Ansonhkg Oct 14, 2025
9d6cb47
fix: update prettier version to 2.8.8 and adjust type definitions for…
Ansonhkg Oct 14, 2025
2b231bf
fix(contracts): update `@lit-protocol/contracts` dependency to use wo…
Ansonhkg Oct 14, 2025
0a4259a
chore(package.json): remove packageManager field and update workspace…
Ansonhkg Oct 14, 2025
ed39f58
Merge branch 'naga' of github.com:LIT-Protocol/js-sdk into feature/js…
Ansonhkg Oct 20, 2025
018297f
fix(package): move 'viem' to peerDependencies
Ansonhkg Oct 20, 2025
0a7b44b
fmt
Ansonhkg Oct 20, 2025
39b1116
fix(packages): align `wagmi` versions
Ansonhkg Oct 21, 2025
6d785bc
fmt
Ansonhkg Oct 21, 2025
001237e
fmt
Ansonhkg Oct 21, 2025
af05fb7
Merge branch 'naga' into feature/jss-110-security-pin-all-versions-v8
Ansonhkg Oct 21, 2025
d704cb1
Merge branch 'naga' of github.com:LIT-Protocol/js-sdk into feature/js…
Ansonhkg Oct 30, 2025
06e24f2
fmt
Ansonhkg Oct 30, 2025
1329391
Merge branch 'naga' into feature/jss-110-security-pin-all-versions-v8
Ansonhkg Oct 30, 2025
63a7fe2
fix: merge naga main in
Ansonhkg Oct 30, 2025
5e9f92c
Merge branch 'naga' into feature/jss-110-security-pin-all-versions-v8
Ansonhkg Oct 30, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 11 additions & 9 deletions .vscode/settings.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,23 +3,25 @@
"todo-tree.tree.scanMode": "workspace",
"conventionalCommits.scopes": ["contracts-sdk", "lit-node-client", "core"],
"workbench.colorCustomizations": {
"activityBar.activeBackground": "#2f7c47",
"actiÇvityBar.background": "#2f7c47",
"activityBar.activeBackground": "#e7520f",
"activityBar.background": "#e7520f",
"activityBar.foreground": "#e7e7e7",
"activityBar.inactiveForeground": "#e7e7e799",
"activityBarBadge.background": "#422c74",
"activityBarBadge.background": "#065a20",
"activityBarBadge.foreground": "#e7e7e7",
"commandCenter.border": "#e7e7e799",
"sash.hoverBorder": "#2f7c47",
"statusBar.background": "#215732",
"sash.hoverBorder": "#e7520f",
"statusBar.background": "#b7410c",
"statusBar.foreground": "#e7e7e7",
"statusBarItem.hoverBackground": "#2f7c47",
"statusBarItem.remoteBackground": "#215732",
"statusBarItem.hoverBackground": "#e7520f",
"statusBarItem.remoteBackground": "#b7410c",
"statusBarItem.remoteForeground": "#e7e7e7",
"titleBar.activeBackground": "#215732",
"titleBar.activeBackground": "#b7410c",
"titleBar.activeForeground": "#e7e7e7",
"titleBar.inactiveBackground": "#21573299",
"titleBar.inactiveBackground": "#b7410c99",
"titleBar.inactiveForeground": "#e7e7e799"
},
"peacock.color": "#215732"
"peacock.color": "#215732",
"peacock.remoteColor": "#B7410C"
}
120 changes: 62 additions & 58 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,9 @@
"scripts": {
"sync:contracts": "nx run contracts:sync",
"sync:docs-changelog": "node tools/sync-docs-changelog.js",
"reset": "rimraf .nx dist node_modules packages/**/node_modules tmp",
"sync:check": "sh -c 'if [ -n \"$PKG\" ]; then pnpm syncpack list-mismatches --types prod,dev,peer --filter \"$PKG\"; else pnpm syncpack list-mismatches --types prod,dev,peer; fi'",
"sync:fix": "sh -c 'if [ -n \"$PKG\" ]; then pnpm syncpack fix-mismatches --types prod,dev,peer --filter \"$PKG\"; else pnpm syncpack fix-mismatches --types prod,dev,peer; fi'",
"reset": "rimraf dist pnpm-lock.yaml node_modules tmp yarn-error.log yarn.lock package-lock.json learn-debug.log .nx lit-auth-storage pkp-tokens lit-auth-local ./e2e/dist ./e2e/node_modules",
"build": "nx run-many --parallel=false --target=build --all --exclude=wrapped-keys,wrapped-keys-lit-actions",
"gen:local-network-context": "dotenvx run --env-file=.env -- node --conditions=import --import tsx packages/networks/src/networks/vNaga/shared/scripts/generate-abi-signatures.ts",
"prettier": "npx nx format:write --all",
Expand All @@ -20,89 +22,91 @@
},
"private": true,
"dependencies": {
"@babel/core": "^7.28.4",
"@babel/preset-env": "^7.28.3",
"@babel/preset-typescript": "^7.27.1",
"@dotenvx/dotenvx": "^1.6.4",
"@lit-protocol/lit-status-sdk": "^0.1.8",
"@babel/core": "7.28.5",
"@babel/preset-env": "7.28.3",
"@babel/preset-typescript": "7.27.1",
"@dotenvx/dotenvx": "1.6.4",
"@ethersproject/contracts": "5.7.0",
"@lit-protocol/contracts": "workspace:*",
"@lit-protocol/nacl": "7.1.1",
"@lit-protocol/uint8arrays": "7.1.1",
"@metamask/eth-sig-util": "5.0.2",
"@noble/curves": "^1.8.1",
"@openagenda/verror": "^3.1.4",
"@simplewebauthn/browser": "^7.2.0",
"@simplewebauthn/typescript-types": "^7.0.0",
"@wagmi/core": "^2.17.1",
"ajv": "^8.12.0",
"babel-jest": "^29",
"base64url": "^3.0.1",
"bs58": "^6.0.0",
"cbor-web": "^9.0.2",
"@noble/curves": "1.8.1",
"@openagenda/verror": "3.1.4",
"@simplewebauthn/browser": "7.2.0",
"@simplewebauthn/typescript-types": "7.0.0",
"@wagmi/core": "2.22.1",
"ajv": "8.12.0",
"babel-jest": "30.2.0",
"base64url": "3.0.1",
"bs58": "6.0.0",
"cbor-web": "9.0.2",
"cross-fetch": "3.1.8",
"depcheck": "^1.4.7",
"depd": "^2.0.0",
"ethers": "^5.7.1",
"jose": "^4.14.4",
"pako": "^2.1.0",
"pino": "^9.6.0",
"pino-caller": "^4.0.0",
"siwe": "^2.3.2",
"depcheck": "1.4.7",
"depd": "2.0.0",
"ethers": "5.7.2",
"jose": "4.14.4",
"pako": "2.1.0",
"pino": "9.6.0",
"pino-caller": "4.0.0",
"siwe": "2.3.2",
"siwe-recap": "0.0.2-alpha.0",
"stytch": "^12.4.0",
"tslib": "^2.8.1",
"uint8arrays": "^4.0.3",
"viem": "2.38.x",
"wagmi": "^2.15.4",
"stytch": "12.4.0",
"syncpack": "13.0.4",
"tslib": "2.8.1",
"uint8arrays": "4.0.3",
"viem": "2.38.3",
"wagmi": "2.18.1",
"zod": "3.24.3",
"zod-validation-error": "3.4.0",
"@ethersproject/contracts": "5.8.0"
"zod-validation-error": "3.4.0"
},
"devDependencies": {
"@changesets/cli": "^2.29.4",
"@changesets/cli": "2.29.4",
"@nx/esbuild": "21.2.1",
"@nx/eslint-plugin": "21.2.1",
"@nx/jest": "21.2.1",
"@nx/js": "21.2.1",
"@nx/node": "21.2.1",
"@nx/plugin": "21.2.1",
"@solana/web3.js": "1.95.3",
"@types/depd": "^1.1.36",
"@types/events": "^3.0.3",
"@types/inquirer": "^9.0.8",
"@types/jest": "27.4.1",
"@types/node": "20",
"@types/node-localstorage": "^1.3.3",
"@types/secp256k1": "^4.0.6",
"@types/depd": "1.1.36",
"@types/events": "3.0.3",
"@types/inquirer": "9.0.8",
"@types/jest": "30.0.0",
"@types/node": "20.0.0",
"@types/node-localstorage": "1.3.3",
"@types/secp256k1": "4.0.6",
"@typescript-eslint/eslint-plugin": "6.21.0",
"@typescript-eslint/parser": "6.21.0",
"artillery": "^2.0.23",
"axios": "^1.6.0",
"esbuild": "^0.19.2",
"esbuild-node-builtins": "^0.1.0",
"esbuild-node-externals": "^1.14.0",
"esbuild-plugin-tsc": "^0.4.0",
"artillery": "2.0.23",
"axios": "1.6.0",
"esbuild": "0.19.2",
"esbuild-node-builtins": "0.1.0",
"esbuild-node-externals": "1.14.0",
"esbuild-plugin-tsc": "0.4.0",
"eslint": "9.34.0",
"eslint-config-prettier": "9.1.0",
"eslint-import-resolver-typescript": "3.6.3",
"eslint-plugin-import": "^2.29.1",
"eslint-plugin-import": "2.29.1",
"eslint-plugin-jsx-a11y": "6.9.0",
"ipfs-unixfs-importer": "12.0.1",
"jest": "^29.2.2",
"jest-environment-jsdom": "^29.7.0",
"node-fetch": "^2.6.1",
"node-localstorage": "^3.0.5",
"jest": "30.2.0",
"jest-environment-jsdom": "29.7.0",
"node-fetch": "2.6.1",
"node-localstorage": "3.0.5",
"nx": "21.2.1",
"path": "^0.12.7",
"pino-pretty": "^13.0.0",
"prettier": "^2.6.2",
"rimraf": "^6.0.1",
"path": "0.12.7",
"pino-pretty": "13.0.0",
"prettier": "2.8.8",
"rimraf": "6.0.1",
"ts-jest": "29.2.5",
"ts-node": "^10.9.2",
"tsx": "^4.20.5",
"typedoc": "^0.28.12",
"ts-node": "10.9.2",
"tsx": "4.20.5",
"typedoc": "0.28.12",
"typescript": "5.8.3"
},
"workspaces": [
"packages/*"
]
],
"packageManager": "pnpm@9.12.3+sha512.cce0f9de9c5a7c95bef944169cc5dfe8741abfb145078c0d508b868056848a87c81e626246cb60967cbd7fd29a6c062ef73ff840d96b3c86c40ac92cf4a813ee"
}
2 changes: 1 addition & 1 deletion packages/access-control-conditions/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@
"main": "./src/index.js",
"typings": "./src/index.d.ts",
"dependencies": {
"ethers": "^5.7.1",
"ethers": "5.7.2",
"zod": "3.24.3",
"@ethersproject/providers": "5.7.0"
}
Expand Down
2 changes: 1 addition & 1 deletion packages/artillery/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
"private": true,
"type": "commonjs",
"dependencies": {
"artillery": "^2.0.23",
"artillery": "2.0.23",
"@lit-protocol/e2e": "workspace:*"
}
}
8 changes: 4 additions & 4 deletions packages/auth-helpers/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,14 +29,14 @@
"main": "./src/index.js",
"typings": "./src/index.d.ts",
"dependencies": {
"@wagmi/core": "^2.17.1",
"ethers": "^5.7.1",
"siwe": "^2.3.2",
"@wagmi/core": "2.22.1",
"ethers": "5.7.2",
"siwe": "2.3.2",
"siwe-recap": "0.0.2-alpha.0",
"zod": "3.24.3",
"@ethersproject/transactions": "5.7.0"
},
"peerDependencies": {
"viem": "2.38.x"
"viem": "2.38.3"
}
}
44 changes: 23 additions & 21 deletions packages/auth-services/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,30 +14,32 @@
"@lit-protocol/logger": "workspace:*",
"@simplewebauthn/server": "6.2.1",
"@t3-oss/env-core": "0.13.8",
"bs58": "^6.0.0",
"bullmq": "^5.52.3",
"cbor-web": "^9.0.2",
"cors": "^2.8.5",
"dotenv": "^16.6.1",
"bs58": "6.0.0",
"bullmq": "5.52.3",
"cbor-web": "9.0.2",
"cors": "2.8.5",
"dotenv": "16.6.1",
"ethers": "5.7.2",
"express": "^5.1.0",
"express-rate-limit": "^8.1.0",
"google-auth-library": "^9.15.1",
"helmet": "^8.1.0",
"jose": "^6.0.7",
"json-with-bigint": "^2.4.2",
"redis": "^4.6.13",
"stytch": "^12.4.0",
"tslib": "^2.8.1",
"viem": "2.38.x",
"wagmi": "^2.14.11",
"zod": "^3.24.3",
"express": "5.1.0",
"express-rate-limit": "8.1.0",
"google-auth-library": "9.15.1",
"helmet": "8.1.0",
"jose": "4.14.4",
Copy link

Copilot AI Oct 14, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The jose library version is being downgraded from 6.0.7 to 4.14.4, which is a major version downgrade that may introduce breaking changes and security vulnerabilities from using an older version.

Suggested change
"jose": "4.14.4",
"jose": "6.0.7",

Copilot uses AI. Check for mistakes.
"json-with-bigint": "2.4.2",
"redis": "4.6.13",
"stytch": "12.4.0",
"tslib": "2.8.1",
"wagmi": "2.18.1",
"zod": "3.24.3",
"zod-validation-error": "3.4.0"
},
"peerDependencies": {
"viem": "2.38.3"
},
"devDependencies": {
"@types/cors": "^2.8.19",
"@types/express": "^5.0.3",
"concurrently": "^9.1.2",
"tsx": "^4.20.5"
"@types/cors": "2.8.19",
"@types/express": "5.0.3",
"concurrently": "9.1.2",
"tsx": "4.20.5"
}
}
24 changes: 12 additions & 12 deletions packages/auth/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,21 +24,21 @@
"dependencies": {
"@noble/hashes": "1.8.0",
"@noble/curves": "1.8.1",
"@simplewebauthn/browser": "^7.2.0",
"@simplewebauthn/typescript-types": "^7.0.0",
"@wagmi/core": "^2.17.1",
"base64url": "^3.0.1",
"cbor-web": "^9.0.2",
"depd": "^2.0.0",
"ethers": "^5.7.1",
"jose": "^4.14.4",
"siwe": "^2.3.2",
"stytch": "^12.4.0",
"@simplewebauthn/browser": "7.2.0",
"@simplewebauthn/typescript-types": "7.0.0",
"@wagmi/core": "2.22.1",
"base64url": "3.0.1",
"cbor-web": "9.0.2",
"depd": "2.0.0",
"ethers": "5.7.2",
"jose": "4.14.4",
"siwe": "2.3.2",
"stytch": "12.4.0",
"zod": "3.24.3"
},
"peerDependencies": {
"tslib": "^2.3.0",
"viem": "2.38.x"
"tslib": "2.8.1",
"viem": "2.38.3"
},
"browser": {
"crypto": false,
Expand Down
4 changes: 2 additions & 2 deletions packages/constants/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,8 +14,8 @@
},
"type": "commonjs",
"dependencies": {
"@openagenda/verror": "^3.1.4",
"tslib": "^2.8.1",
"@openagenda/verror": "3.1.4",
"tslib": "2.8.1",
"zod": "3.24.3",
"@lit-protocol/contracts": "workspace:*"
},
Expand Down
20 changes: 10 additions & 10 deletions packages/contracts/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -153,17 +153,17 @@
"directory": "../../dist/packages/contracts"
},
"devDependencies": {
"@t3-oss/env-core": "^0.13.8",
"@typechain/ethers-v6": "^0.5.1",
"esbuild": "^0.19.2",
"ethers": "^6.13.5",
"tsx": "^4.20.5",
"typechain": "^8.3.2",
"typescript": "^5.8.3",
"viem": "2.38.x",
"zod": "^3.24.3"
"@t3-oss/env-core": "0.13.8",
"@typechain/ethers-v6": "0.5.1",
"esbuild": "0.19.2",
"ethers": "5.7.2",
"tsx": "4.20.5",
"typechain": "8.3.2",
"typescript": "5.8.3",
"zod": "3.24.3"
},
"peerDependencies": {
"typescript": "^5.0.0"
"typescript": "5.8.3",
"viem": "2.38.3"
}
}
8 changes: 4 additions & 4 deletions packages/crypto/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,10 +27,10 @@
"dependencies": {
"@lit-protocol/nacl": "7.1.1",
"@lit-protocol/uint8arrays": "7.1.1",
"@noble/curves": "^1.8.1",
"@noble/hashes": "^1.8.0",
"ajv": "^8.12.0",
"@noble/curves": "1.8.1",
"@noble/hashes": "1.8.0",
"ajv": "8.12.0",
"zod": "3.24.3",
"tslib": "^2.8.1"
"tslib": "2.8.1"
}
}
Loading
Loading