diff --git a/CHANGELOG.md b/CHANGELOG.md index c74370b..adad6f0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,12 @@ All notable changes are documented here. ## Unreleased +## 0.3.1 - 2026-09-01 + +- Corrected the packaged corresponding-source identity to name this release and its immutable source tag. +- Serialized the unit-test worker pool so release verification remains reliable on shared filesystems. +- Normalized ZIP creation to UTC so release bytes remain reproducible across host timezones. + ## 0.3.0 - 2026-08-19 - Added a live WebAuthn Extensions Lab for `credProps`, PRF, `largeBlob`, `appid` and `appidExclude`, including client-capability detection and normalized request/result inspection. diff --git a/README.md b/README.md index b06ce38..af8d8f9 100644 --- a/README.md +++ b/README.md @@ -54,7 +54,7 @@ The Vite base is relative, so both `/` and nested paths work. `npm run toolbox:c ## Static deployment -Serve `dist/` or the contents of `release/auth-tools-0.3.0.zip` over HTTPS. Recommended response headers for the dedicated Auth Tools origin: +Serve `dist/` or the contents of `release/auth-tools-0.3.1.zip` over HTTPS. Recommended response headers for the dedicated Auth Tools origin: ```text Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self' diff --git a/SOURCE.md b/SOURCE.md index 2dd2b8a..6097c8d 100644 --- a/SOURCE.md +++ b/SOURCE.md @@ -1,8 +1,8 @@ # Corresponding source and provenance -The corresponding source for OTP & Passkey Tools 0.2.0 is published at: +The corresponding source for OTP & Passkey Tools 0.3.1 is published at: -https://git.add-ideas.de/lotobo/auth-tools/src/tag/v0.2.0 +https://git.add-ideas.de/lotobo/auth-tools/src/tag/v0.3.1 Build that tag with Node.js 22 and the exact `package-lock.json`: diff --git a/package-lock.json b/package-lock.json index 70442a3..fb55bbc 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "auth-tools", - "version": "0.3.0", + "version": "0.3.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "auth-tools", - "version": "0.3.0", + "version": "0.3.1", "license": "GPL-3.0-or-later", "dependencies": { "@add-ideas/toolbox-contract": "0.2.3", diff --git a/package.json b/package.json index d6036ba..eca9aee 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "auth-tools", - "version": "0.3.0", + "version": "0.3.1", "description": "Inspect and test OTP and WebAuthn authentication locally in the browser.", "license": "GPL-3.0-or-later", "author": "Albrecht Degering", diff --git a/public/CHANGELOG.md b/public/CHANGELOG.md index c74370b..adad6f0 100644 --- a/public/CHANGELOG.md +++ b/public/CHANGELOG.md @@ -4,6 +4,12 @@ All notable changes are documented here. ## Unreleased +## 0.3.1 - 2026-09-01 + +- Corrected the packaged corresponding-source identity to name this release and its immutable source tag. +- Serialized the unit-test worker pool so release verification remains reliable on shared filesystems. +- Normalized ZIP creation to UTC so release bytes remain reproducible across host timezones. + ## 0.3.0 - 2026-08-19 - Added a live WebAuthn Extensions Lab for `credProps`, PRF, `largeBlob`, `appid` and `appidExclude`, including client-capability detection and normalized request/result inspection. diff --git a/public/README.md b/public/README.md index b06ce38..af8d8f9 100644 --- a/public/README.md +++ b/public/README.md @@ -54,7 +54,7 @@ The Vite base is relative, so both `/` and nested paths work. `npm run toolbox:c ## Static deployment -Serve `dist/` or the contents of `release/auth-tools-0.3.0.zip` over HTTPS. Recommended response headers for the dedicated Auth Tools origin: +Serve `dist/` or the contents of `release/auth-tools-0.3.1.zip` over HTTPS. Recommended response headers for the dedicated Auth Tools origin: ```text Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self' diff --git a/public/SOURCE.md b/public/SOURCE.md index 2dd2b8a..6097c8d 100644 --- a/public/SOURCE.md +++ b/public/SOURCE.md @@ -1,8 +1,8 @@ # Corresponding source and provenance -The corresponding source for OTP & Passkey Tools 0.2.0 is published at: +The corresponding source for OTP & Passkey Tools 0.3.1 is published at: -https://git.add-ideas.de/lotobo/auth-tools/src/tag/v0.2.0 +https://git.add-ideas.de/lotobo/auth-tools/src/tag/v0.3.1 Build that tag with Node.js 22 and the exact `package-lock.json`: diff --git a/public/toolbox-app.json b/public/toolbox-app.json index da70991..a939ead 100644 --- a/public/toolbox-app.json +++ b/public/toolbox-app.json @@ -3,7 +3,7 @@ "schemaVersion": 1, "id": "de.add-ideas.auth-tools", "name": "OTP & Passkey Tools", - "version": "0.3.0", + "version": "0.3.1", "description": "Generate, inspect and verify OTP credentials and test WebAuthn/passkey ceremonies locally in the browser.", "entry": "./", "icon": "./favicon.svg", diff --git a/scripts/package-release.mjs b/scripts/package-release.mjs index a96adb5..328f116 100644 --- a/scripts/package-release.mjs +++ b/scripts/package-release.mjs @@ -126,7 +126,11 @@ try { stagedArchive, ...sourceFiles.map((file) => file.relative), ], - { cwd: stagedTree, maxBuffer: 1024 * 1024 }, + { + cwd: stagedTree, + env: { ...process.env, TZ: "UTC" }, + maxBuffer: 1024 * 1024, + }, ); const archive = await readFile(stagedArchive); const digest = createHash("sha256").update(archive).digest("hex"); diff --git a/src/toolbox/manifest.source.json b/src/toolbox/manifest.source.json index da70991..a939ead 100644 --- a/src/toolbox/manifest.source.json +++ b/src/toolbox/manifest.source.json @@ -3,7 +3,7 @@ "schemaVersion": 1, "id": "de.add-ideas.auth-tools", "name": "OTP & Passkey Tools", - "version": "0.3.0", + "version": "0.3.1", "description": "Generate, inspect and verify OTP credentials and test WebAuthn/passkey ceremonies locally in the browser.", "entry": "./", "icon": "./favicon.svg", diff --git a/src/version.ts b/src/version.ts index badc64b..5d57965 100644 --- a/src/version.ts +++ b/src/version.ts @@ -1 +1 @@ -export const APPLICATION_VERSION = "0.3.0"; +export const APPLICATION_VERSION = "0.3.1"; diff --git a/vite.config.ts b/vite.config.ts index bc5843c..7192d84 100644 --- a/vite.config.ts +++ b/vite.config.ts @@ -11,6 +11,8 @@ export default defineConfig({ setupFiles: "./src/test/setup.ts", css: true, restoreMocks: true, + pool: "forks", + maxWorkers: 1, exclude: ["tests/browser/**", "node_modules/**", "dist/**"], }, });