Release Auth Tools v0.3.1

CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes are documented here.
 
 ## Unreleased
 
+## 0.3.1 - 2026-09-01
+
+- Corrected the packaged corresponding-source identity to name this release and its immutable source tag.
+- Serialized the unit-test worker pool so release verification remains reliable on shared filesystems.
+- Normalized ZIP creation to UTC so release bytes remain reproducible across host timezones.
+
 ## 0.3.0 - 2026-08-19
 
 - Added a live WebAuthn Extensions Lab for `credProps`, PRF, `largeBlob`, `appid` and `appidExclude`, including client-capability detection and normalized request/result inspection.

README.md

@@ -54,7 +54,7 @@ The Vite base is relative, so both `/` and nested paths work. `npm run toolbox:c
 
 ## Static deployment
 
-Serve `dist/` or the contents of `release/auth-tools-0.3.0.zip` over HTTPS. Recommended response headers for the dedicated Auth Tools origin:
+Serve `dist/` or the contents of `release/auth-tools-0.3.1.zip` over HTTPS. Recommended response headers for the dedicated Auth Tools origin:
 
 ```text
 Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'

SOURCE.md

@@ -1,8 +1,8 @@
 # Corresponding source and provenance
 
-The corresponding source for OTP & Passkey Tools 0.2.0 is published at:
+The corresponding source for OTP & Passkey Tools 0.3.1 is published at:
 
-https://git.add-ideas.de/lotobo/auth-tools/src/tag/v0.2.0
+https://git.add-ideas.de/lotobo/auth-tools/src/tag/v0.3.1
 
 Build that tag with Node.js 22 and the exact `package-lock.json`:
 

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "auth-tools",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "auth-tools",
-      "version": "0.3.0",
+      "version": "0.3.1",
       "license": "GPL-3.0-or-later",
       "dependencies": {
         "@add-ideas/toolbox-contract": "0.2.3",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "auth-tools",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Inspect and test OTP and WebAuthn authentication locally in the browser.",
   "license": "GPL-3.0-or-later",
   "author": "Albrecht Degering",

public/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes are documented here.
 
 ## Unreleased
 
+## 0.3.1 - 2026-09-01
+
+- Corrected the packaged corresponding-source identity to name this release and its immutable source tag.
+- Serialized the unit-test worker pool so release verification remains reliable on shared filesystems.
+- Normalized ZIP creation to UTC so release bytes remain reproducible across host timezones.
+
 ## 0.3.0 - 2026-08-19
 
 - Added a live WebAuthn Extensions Lab for `credProps`, PRF, `largeBlob`, `appid` and `appidExclude`, including client-capability detection and normalized request/result inspection.

public/README.md

@@ -54,7 +54,7 @@ The Vite base is relative, so both `/` and nested paths work. `npm run toolbox:c
 
 ## Static deployment
 
-Serve `dist/` or the contents of `release/auth-tools-0.3.0.zip` over HTTPS. Recommended response headers for the dedicated Auth Tools origin:
+Serve `dist/` or the contents of `release/auth-tools-0.3.1.zip` over HTTPS. Recommended response headers for the dedicated Auth Tools origin:
 
 ```text
 Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'

public/SOURCE.md

@@ -1,8 +1,8 @@
 # Corresponding source and provenance
 
-The corresponding source for OTP & Passkey Tools 0.2.0 is published at:
+The corresponding source for OTP & Passkey Tools 0.3.1 is published at:
 
-https://git.add-ideas.de/lotobo/auth-tools/src/tag/v0.2.0
+https://git.add-ideas.de/lotobo/auth-tools/src/tag/v0.3.1
 
 Build that tag with Node.js 22 and the exact `package-lock.json`:
 

public/toolbox-app.json

@@ -3,7 +3,7 @@
   "schemaVersion": 1,
   "id": "de.add-ideas.auth-tools",
   "name": "OTP & Passkey Tools",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Generate, inspect and verify OTP credentials and test WebAuthn/passkey ceremonies locally in the browser.",
   "entry": "./",
   "icon": "./favicon.svg",

scripts/package-release.mjs

@@ -126,7 +126,11 @@ try {
       stagedArchive,
       ...sourceFiles.map((file) => file.relative),
     ],
-    { cwd: stagedTree, maxBuffer: 1024 * 1024 },
+    {
+      cwd: stagedTree,
+      env: { ...process.env, TZ: "UTC" },
+      maxBuffer: 1024 * 1024,
+    },
   );
   const archive = await readFile(stagedArchive);
   const digest = createHash("sha256").update(archive).digest("hex");

src/toolbox/manifest.source.json

@@ -3,7 +3,7 @@
   "schemaVersion": 1,
   "id": "de.add-ideas.auth-tools",
   "name": "OTP & Passkey Tools",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Generate, inspect and verify OTP credentials and test WebAuthn/passkey ceremonies locally in the browser.",
   "entry": "./",
   "icon": "./favicon.svg",

src/version.ts

@@ -1 +1 @@
-export const APPLICATION_VERSION = "0.3.0";
+export const APPLICATION_VERSION = "0.3.1";

vite.config.ts

@@ -11,6 +11,8 @@ export default defineConfig({
     setupFiles: "./src/test/setup.ts",
     css: true,
     restoreMocks: true,
+    pool: "forks",
+    maxWorkers: 1,
     exclude: ["tests/browser/**", "node_modules/**", "dist/**"],
   },
 });