release: 0.1.1

CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to Heightproof will be documented in this file.
 
 ## Unreleased
 
+## 0.1.1
+
+- First release published by the `npm publish` workflow with npm trusted publishing and provenance. No code changes from 0.1.0.
+
+## 0.1.0
+
+- First npm release of `@heightproof/shared`, `@heightproof/sdk-node` and `@heightproof/web3`, including the changes listed below.
+
 - Added signed verification with AirnodeHub. `airnodeDrpcEndpoint()` adds AirnodeHub's dRPC listing to the D2 fan-out. Its EIP-191 attestations are checked against the exact request sent, re-checked by the worker against the kept body before anything is stored, and cited in D2 incident reasons. Each verification endpoint can take its own `fetchImpl`, for example one that pays x402 charges. Migration `003_airnode_attestation.sql` adds `evm_attestation` and `evm_attested_by`. See `docs/airnode.md`.
 - Verification endpoints that refuse with a non-JSON-RPC HTTP error, such as an unpaid `402`, are recorded as failed observations instead of being parsed as answers.
 - Added a Helm chart (`deploy/helm/heightproof`) for the API, worker and dashboard, with optional bundled Postgres and Redis StatefulSets, generated-and-persisted secrets, advisory-locked migration init containers, optional ingress/HPA/PDB, hardened pod security defaults, and a `helm test` smoke test.

RELEASING.md

@@ -8,13 +8,16 @@ A `v*` tag releases everything at that version:
 
 ## Cutting a release
 
-1. Set the version in all three packages, and in the exact pins they hold on each other:
+1. Set the version in all three packages, and in every exact `@heightproof/*` pin across the
+   workspaces (the apps and examples pin them too, and a stale pin makes npm fetch the old
+   release from the registry instead of linking the workspace):
 
    ```bash
    VERSION=0.2.0
    npm version "$VERSION" --no-git-tag-version -w packages/shared -w packages/sdk-node -w packages/web3
-   npm pkg set "dependencies.@heightproof/shared=$VERSION" -w packages/sdk-node -w packages/web3
-   npm pkg set "dependencies.@heightproof/sdk-node=$VERSION" -w packages/web3
+   for f in $(git grep -l '"@heightproof/' -- '*package.json'); do
+     sed -i.bak -E "s/(\"@heightproof\/[a-z0-9-]+\": )\"[0-9][^\"]*\"/\1\"$VERSION\"/" "$f" && rm "$f.bak"
+   done
    npm install
    ```
 
@@ -43,6 +46,7 @@ that already exists, so:
 
    ```bash
    npm login
+   rm -rf packages/*/dist packages/*/tsconfig.tsbuildinfo
    npm run build
    npm publish -w packages/shared --access public
    npm publish -w packages/sdk-node --access public

apps/api/package.json

@@ -12,7 +12,7 @@
   "dependencies": {
     "@fastify/cors": "^11.3.0",
     "@fastify/rate-limit": "^11.2.0",
-    "@heightproof/shared": "0.1.0",
+    "@heightproof/shared": "0.1.1",
     "fastify": "^5.12.3",
     "ioredis": "^5.4.1",
     "pg": "^8.12.0",

apps/worker/package.json

@@ -11,7 +11,7 @@
     "test:integration": "HEIGHTPROOF_INTEGRATION=1 vitest run src/worker.integration.test.ts"
   },
   "dependencies": {
-    "@heightproof/shared": "0.1.0",
+    "@heightproof/shared": "0.1.1",
     "ioredis": "^5.4.1",
     "pg": "^8.12.0"
   },

examples/express/package.json

@@ -7,7 +7,7 @@
     "dev": "tsx server.ts"
   },
   "dependencies": {
-    "@heightproof/sdk-node": "0.1.0",
+    "@heightproof/sdk-node": "0.1.1",
     "body-parser": "^2.3.0",
     "express": "^5.2.1",
     "tsx": "^4.19.0"

examples/web3-rpc/package.json

@@ -7,7 +7,7 @@
     "dev": "tsx client.ts"
   },
   "dependencies": {
-    "@heightproof/web3": "0.1.0",
+    "@heightproof/web3": "0.1.1",
     "tsx": "^4.19.0"
   }
 }

packages/sdk-node/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heightproof/sdk-node",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Heightproof SDK for Node.js: batched, non-blocking event delivery and Express middleware.",
   "keywords": [
     "heightproof",
@@ -42,7 +42,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@heightproof/shared": "0.1.0"
+    "@heightproof/shared": "0.1.1"
   },
   "peerDependencies": {
     "express": ">=4"

packages/shared/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heightproof/shared",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Shared event schema, JSON-RPC normalization and reliability detectors for Heightproof.",
   "keywords": [
     "heightproof",

packages/web3/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heightproof/web3",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Detect EVM RPC failures that return 200 OK: wrap an EIP-1193 provider or viem transport and report every call to Heightproof.",
   "keywords": [
     "heightproof",
@@ -46,8 +46,8 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@heightproof/sdk-node": "0.1.0",
-    "@heightproof/shared": "0.1.0"
+    "@heightproof/sdk-node": "0.1.1",
+    "@heightproof/shared": "0.1.1"
   },
   "peerDependencies": {
     "viem": ">=2"