From 6a867ffca01836fbbf089ff08bb0ac4d9e44b5cf Mon Sep 17 00:00:00 2001 From: macjayz Date: Sat, 31 Oct 2026 22:54:22 +0100 Subject: [PATCH] release: 0.1.1 Bumps @heightproof/shared, sdk-node and web3, and every internal pin across the workspaces, to 0.1.1. No code changes: this is the first release published by the npm-publish workflow, which validates the trusted publisher on all three packages. RELEASING.md now bumps the pins in apps/ and examples/ too, and clears tsconfig.tsbuildinfo with dist/ before a manual build. Co-Authored-By: Claude Opus 5.5 --- CHANGELOG.md | 8 ++++++++ RELEASING.md | 10 +++++++--- apps/api/package.json | 2 +- apps/worker/package.json | 2 +- examples/express/package.json | 2 +- examples/web3-rpc/package.json | 2 +- package-lock.json | 20 ++++++++++---------- packages/sdk-node/package.json | 4 ++-- packages/shared/package.json | 2 +- packages/web3/package.json | 6 +++--- 10 files changed, 35 insertions(+), 23 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2eec785..8fdb999 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,14 @@ All notable changes to Heightproof will be documented in this file. ## Unreleased +## 0.1.1 + +- First release published by the `npm publish` workflow with npm trusted publishing and provenance. No code changes from 0.1.0. + +## 0.1.0 + +- First npm release of `@heightproof/shared`, `@heightproof/sdk-node` and `@heightproof/web3`, including the changes listed below. + - Added signed verification with AirnodeHub. `airnodeDrpcEndpoint()` adds AirnodeHub's dRPC listing to the D2 fan-out. Its EIP-191 attestations are checked against the exact request sent, re-checked by the worker against the kept body before anything is stored, and cited in D2 incident reasons. Each verification endpoint can take its own `fetchImpl`, for example one that pays x402 charges. Migration `003_airnode_attestation.sql` adds `evm_attestation` and `evm_attested_by`. See `docs/airnode.md`. - Verification endpoints that refuse with a non-JSON-RPC HTTP error, such as an unpaid `402`, are recorded as failed observations instead of being parsed as answers. - Added a Helm chart (`deploy/helm/heightproof`) for the API, worker and dashboard, with optional bundled Postgres and Redis StatefulSets, generated-and-persisted secrets, advisory-locked migration init containers, optional ingress/HPA/PDB, hardened pod security defaults, and a `helm test` smoke test. diff --git a/RELEASING.md b/RELEASING.md index 6e507c3..14e3386 100644 --- a/RELEASING.md +++ b/RELEASING.md @@ -8,13 +8,16 @@ A `v*` tag releases everything at that version: ## Cutting a release -1. Set the version in all three packages, and in the exact pins they hold on each other: +1. Set the version in all three packages, and in every exact `@heightproof/*` pin across the + workspaces (the apps and examples pin them too, and a stale pin makes npm fetch the old + release from the registry instead of linking the workspace): ```bash VERSION=0.2.0 npm version "$VERSION" --no-git-tag-version -w packages/shared -w packages/sdk-node -w packages/web3 - npm pkg set "dependencies.@heightproof/shared=$VERSION" -w packages/sdk-node -w packages/web3 - npm pkg set "dependencies.@heightproof/sdk-node=$VERSION" -w packages/web3 + for f in $(git grep -l '"@heightproof/' -- '*package.json'); do + sed -i.bak -E "s/(\"@heightproof\/[a-z0-9-]+\": )\"[0-9][^\"]*\"/\1\"$VERSION\"/" "$f" && rm "$f.bak" + done npm install ``` @@ -43,6 +46,7 @@ that already exists, so: ```bash npm login + rm -rf packages/*/dist packages/*/tsconfig.tsbuildinfo npm run build npm publish -w packages/shared --access public npm publish -w packages/sdk-node --access public diff --git a/apps/api/package.json b/apps/api/package.json index 7a13eca..3efe7d7 100644 --- a/apps/api/package.json +++ b/apps/api/package.json @@ -12,7 +12,7 @@ "dependencies": { "@fastify/cors": "^11.3.0", "@fastify/rate-limit": "^11.2.0", - "@heightproof/shared": "0.1.0", + "@heightproof/shared": "0.1.1", "fastify": "^5.12.3", "ioredis": "^5.4.1", "pg": "^8.12.0", diff --git a/apps/worker/package.json b/apps/worker/package.json index 2d589aa..95caf4b 100644 --- a/apps/worker/package.json +++ b/apps/worker/package.json @@ -11,7 +11,7 @@ "test:integration": "HEIGHTPROOF_INTEGRATION=1 vitest run src/worker.integration.test.ts" }, "dependencies": { - "@heightproof/shared": "0.1.0", + "@heightproof/shared": "0.1.1", "ioredis": "^5.4.1", "pg": "^8.12.0" }, diff --git a/examples/express/package.json b/examples/express/package.json index 251ca84..2cc13f7 100644 --- a/examples/express/package.json +++ b/examples/express/package.json @@ -7,7 +7,7 @@ "dev": "tsx server.ts" }, "dependencies": { - "@heightproof/sdk-node": "0.1.0", + "@heightproof/sdk-node": "0.1.1", "body-parser": "^2.3.0", "express": "^5.2.1", "tsx": "^4.19.0" diff --git a/examples/web3-rpc/package.json b/examples/web3-rpc/package.json index 6301f74..b2331af 100644 --- a/examples/web3-rpc/package.json +++ b/examples/web3-rpc/package.json @@ -7,7 +7,7 @@ "dev": "tsx client.ts" }, "dependencies": { - "@heightproof/web3": "0.1.0", + "@heightproof/web3": "0.1.1", "tsx": "^4.19.0" } } diff --git a/package-lock.json b/package-lock.json index 3902cd7..94b2499 100644 --- a/package-lock.json +++ b/package-lock.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/cors": "^11.3.0", "@fastify/rate-limit": "^11.2.0", - "@heightproof/shared": "0.1.0", + "@heightproof/shared": "0.1.1", "fastify": "^5.12.3", "ioredis": "^5.4.1", "pg": "^8.12.0", @@ -72,7 +72,7 @@ "name": "@heightproof/worker", "version": "0.1.0", "dependencies": { - "@heightproof/shared": "0.1.0", + "@heightproof/shared": "0.1.1", "ioredis": "^5.4.1", "pg": "^8.12.0" }, @@ -85,7 +85,7 @@ "name": "heightproof-express-example", "version": "0.1.0", "dependencies": { - "@heightproof/sdk-node": "0.1.0", + "@heightproof/sdk-node": "0.1.1", "body-parser": "^2.3.0", "express": "^5.2.1", "tsx": "^4.19.0" @@ -95,7 +95,7 @@ "name": "@heightproof/example-web3-rpc", "version": "0.1.0", "dependencies": { - "@heightproof/web3": "0.1.0", + "@heightproof/web3": "0.1.1", "tsx": "^4.19.0" } }, @@ -6118,10 +6118,10 @@ }, "packages/sdk-node": { "name": "@heightproof/sdk-node", - "version": "0.1.0", + "version": "0.1.1", "license": "MIT", "dependencies": { - "@heightproof/shared": "0.1.0" + "@heightproof/shared": "0.1.1" }, "devDependencies": { "@types/express": "^4.17.21", @@ -6141,7 +6141,7 @@ }, "packages/shared": { "name": "@heightproof/shared", - "version": "0.1.0", + "version": "0.1.1", "license": "MIT", "dependencies": { "@noble/curves": "1.9.7", @@ -6155,11 +6155,11 @@ }, "packages/web3": { "name": "@heightproof/web3", - "version": "0.1.0", + "version": "0.1.1", "license": "MIT", "dependencies": { - "@heightproof/sdk-node": "0.1.0", - "@heightproof/shared": "0.1.0" + "@heightproof/sdk-node": "0.1.1", + "@heightproof/shared": "0.1.1" }, "devDependencies": { "@noble/curves": "1.9.7", diff --git a/packages/sdk-node/package.json b/packages/sdk-node/package.json index e5c06b2..b1d7153 100644 --- a/packages/sdk-node/package.json +++ b/packages/sdk-node/package.json @@ -1,6 +1,6 @@ { "name": "@heightproof/sdk-node", - "version": "0.1.0", + "version": "0.1.1", "description": "Heightproof SDK for Node.js: batched, non-blocking event delivery and Express middleware.", "keywords": [ "heightproof", @@ -42,7 +42,7 @@ "prepublishOnly": "npm run build" }, "dependencies": { - "@heightproof/shared": "0.1.0" + "@heightproof/shared": "0.1.1" }, "peerDependencies": { "express": ">=4" diff --git a/packages/shared/package.json b/packages/shared/package.json index 009dc9f..0409099 100644 --- a/packages/shared/package.json +++ b/packages/shared/package.json @@ -1,6 +1,6 @@ { "name": "@heightproof/shared", - "version": "0.1.0", + "version": "0.1.1", "description": "Shared event schema, JSON-RPC normalization and reliability detectors for Heightproof.", "keywords": [ "heightproof", diff --git a/packages/web3/package.json b/packages/web3/package.json index 1d1e489..1e55429 100644 --- a/packages/web3/package.json +++ b/packages/web3/package.json @@ -1,6 +1,6 @@ { "name": "@heightproof/web3", - "version": "0.1.0", + "version": "0.1.1", "description": "Detect EVM RPC failures that return 200 OK: wrap an EIP-1193 provider or viem transport and report every call to Heightproof.", "keywords": [ "heightproof", @@ -46,8 +46,8 @@ "prepublishOnly": "npm run build" }, "dependencies": { - "@heightproof/sdk-node": "0.1.0", - "@heightproof/shared": "0.1.0" + "@heightproof/sdk-node": "0.1.1", + "@heightproof/shared": "0.1.1" }, "peerDependencies": { "viem": ">=2"