Skip to content

Latest commit

 

History

History
451 lines (223 loc) · 16.2 KB

CHANGELOG.md

File metadata and controls

451 lines (223 loc) · 16.2 KB

Changelog

12.0.0 (2024-09-24)

⚠️ BREAKING CHANGES

  • ssri now supports node ^18.17.0 || >=20.5.0

Bug Fixes

  • b7a3f9a #141 align to npm 10 node engine range (@hashtagchris)

Chores

11.0.0 (2024-09-03)

⚠️ BREAKING CHANGES

  • ssri is now compatible with the following semver range for node: ^16.14.0 || >=18.0.0

Bug Fixes

  • 29a6e2c Address breaking engine change in dependency (@hashtagchris)

Chores

  • db4219f bump @npmcli/eslint-config from 4.0.5 to 5.0.0 (@dependabot[bot])
  • f2dd012 template-oss-apply (@hashtagchris)
  • f2a2a9d postinstall for dependabot template-oss PR (@hashtagchris)
  • 4508f71 bump @npmcli/template-oss from 4.22.0 to 4.23.3 (@dependabot[bot])

10.0.6 (2024-05-04)

Bug Fixes

Chores

  • 55e7dfb #127 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)
  • 96d1795 #127 postinstall for dependabot template-oss PR (@lukekarrys)
  • 10d5e8a #125 bump @npmcli/template-oss from 4.21.3 to 4.21.4 (@dependabot[bot])

10.0.5 (2023-08-14)

Dependencies

10.0.4 (2023-04-26)

Dependencies

  • 152e2bc #78 bump minipass from 4.2.7 to 5.0.0 (#78)

10.0.3 (2023-04-11)

Bug Fixes

  • 7fef846 #79 optimize adding this.algorithm to algorithms list (@wraithgar)
  • d90f674 #79 prevent DEFAULT_ALGORITHM mutation (@wraithgar)
  • 4e94d15 #79 Integrity#match prioritizes overlapping hashes (@wraithgar)
  • dce3dab #79 faster stream verification (@H4ad)

10.0.2 (2023-04-03)

Bug Fixes

  • 8e80eca #74 move from symbols to private methods (#74) (@wraithgar)
  • a316b12 #75 faster toString for integrity (#75) (@H4ad)
  • 6e6877d #72 remove spread of defaultOpts (#72) (@H4ad)

10.0.1 (2022-12-07)

Dependencies

10.0.0 (2022-10-10)

⚠️ BREAKING CHANGES

  • ssri is now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0

Features

  • 3de0c45 #52 postinstall for dependabot template-oss PR (@lukekarrys)

Bug Fixes

  • 2e876d1 #48 properly handle missing algorithm type (#48) (@ahmedwelhakim)

9.0.1 (2022-05-19)

Bug Fixes

  • store emitted events and re-emit them for late listeners (#39) (c5421f1)

9.0.0 (2022-04-05)

⚠ BREAKING CHANGES

  • this drops support for node 8, node 10, and non-LTS versions of node 12 and node 14

Dependencies

8.0.1 (2021-01-27)

Bug Fixes

  • simplify regex for strict mode, add tests (76e2233)

8.0.0 (2020-02-18)

⚠ BREAKING CHANGES

  • SRI values with ../ in the algorithm name now throw as invalid (which they always probably should have!)
  • adds a new error that will be thrown. Empty SRIs are no longer considered valid for checking, only when using integrityStream to calculate the SRI value.

PR-URL: #12 Credit: @claudiahdz

Features

Bug Fixes

  • harden SRI parsing against ../ funny business (4062735)
  • IntegrityStream responds to mutating opts object mid-stream (4a963e5)
  • throw null when sri is empty or bad (a6811cb), closes #12

7.1.0 (2019-10-24)

Bug Fixes

  • Do not blow up if the opts object is mutated (806e8c8)

Features

  • Add Integrity#merge method (0572c1d), closes #4

7.0.1 (2019-09-30)

7.0.0 (2019-09-18)

⚠ BREAKING CHANGES

  • ssri no longer accepts a Promise option, and does not use, return, or rely on Bluebird promises.
  • drop support for Node.js v6.

We knew this was coming, and the Stream changes are breaking anyway. May as well do this now.

  • streams: this replaces the Node.js stream with a Minipass stream. See http://npm.im/minipass for documentation.

Bug Fixes

  • return super.write() return value (55b055d)

  • Use native promises only (6d13165)

  • update tap, standard, standard-version, travis (2e54956)

  • streams: replace transform streams with minipass (363995e)

6.0.1 (2018-08-27)

Bug Fixes

  • opts: use figgy-pudding to specify consumed opts (cf86553)

6.0.0 (2018-04-09)

Bug Fixes

meta

  • drop support for node@4 (d9bf359)

BREAKING CHANGES

  • node@4 is no longer supported

5.3.0 (2018-03-13)

Features

  • checkData: optionally throw when checkData fails (bf26b84)

5.2.4 (2018-02-16)

5.2.3 (2018-02-16)

Bug Fixes

  • hashes: filter hash priority list by available hashes (2fa30b8)
  • integrityStream: dedupe algorithms to generate (d56c654)

5.2.2 (2018-02-14)

Bug Fixes

  • security: tweak strict SRI regex (#10) (d0ebcdc)

5.2.1 (2018-02-06)

5.2.0 (2018-02-06)

Features

  • match: add integrity.match() (3c49cc4)

5.1.0 (2018-01-18)

Bug Fixes

  • checkStream: integrityStream now takes opts.integrity algos into account (d262910)

Features

  • sha3: do some guesswork about upcoming sha3 (7fdd9df)

5.0.0 (2017-10-23)

Features

  • license: relicense to ISC (#9) (c82983a)

BREAKING CHANGES

  • license: the license has been changed from CC0-1.0 to ISC.

4.1.6 (2017-06-07)

Bug Fixes

  • checkStream: make sure to pass all opts through (0b1bcbe)

4.1.5 (2017-06-05)

Bug Fixes

  • integrityStream: stop crashing if opts.algorithms and opts.integrity have an algo mismatch (fb1293e)

4.1.4 (2017-05-31)

Bug Fixes

  • node: older versions of node@4 do not support base64buffer string parsing (513df4e)

4.1.3 (2017-05-24)

Bug Fixes

  • check: handle various bad hash corner cases better (c2c262b)

4.1.2 (2017-04-18)

Bug Fixes

  • stream: _flush can be called multiple times. use on("end") (b1c4805)

4.1.1 (2017-04-12)

Bug Fixes

  • pickAlgorithm: error if pickAlgorithm() is used in an empty Integrity (fab470e)

4.1.0 (2017-04-07)

Features

  • adding ssri.create for a crypto style interface (#2) (96f52ad)

4.0.0 (2017-04-03)

Bug Fixes

  • integrity: should have changed the error code before. oops (8381afa)

BREAKING CHANGES

  • integrity: EBADCHECKSUM -> EINTEGRITY for verification errors

3.0.2 (2017-04-03)

3.0.1 (2017-04-03)

Bug Fixes

  • package.json: really should have these in the keywords because search (a6ac6d0)

3.0.0 (2017-04-03)

Bug Fixes

  • hashes: IntegrityMetadata -> Hash (d04aa1f)

Features

  • check: return IntegrityMetadata on check success (2301e74)
  • fromHex: ssri.fromHex to make it easier to generate them from hex valus (049b89e)
  • hex: utility function for getting hex version of digest (a9f021c)
  • hexDigest: added hexDigest method to Integrity objects too (85208ba)
  • integrity: add .isIntegrity and .isIntegrityMetadata (1b29e6f)
  • integrityStream: new stream that can both generate and check streamed data (fd23e1b)
  • parse: allow parsing straight into a single IntegrityMetadata object (c8ddf48)
  • pickAlgorithm: Intergrity#pickAlgorithm() added (b97a796)
  • size: calculate and update stream sizes (02ed1ad)

BREAKING CHANGES

  • hashes: .isIntegrityMetadata is now .isHash. Also, any references to IntegrityMetadata now refer to Hash.
  • integrityStream: createCheckerStream has been removed and replaced with a general-purpose integrityStream.

To convert existing createCheckerStream code, move the sri argument into opts.integrity in integrityStream. All other options should be the same.

  • check: checkData, checkStream, and createCheckerStream now yield a whole IntegrityMetadata instance representing the first successful hash match.

2.0.0 (2017-03-24)

Bug Fixes

  • strict-mode: make regexes more rigid (122a32c)

Features

  • api: added serialize alias for unparse (999b421)
  • concat: add Integrity#concat() (cae12c7)
  • pickAlgo: pick the strongest algorithm provided, by default (58c18f7)
  • strict-mode: strict SRI support (3f0b64c)
  • stringify: replaced unparse/serialize with stringify (4acad30)
  • verification: add opts.pickAlgorithm (f72e658)

BREAKING CHANGES

  • pickAlgo: ssri will prioritize specific hashes now
  • stringify: serialize and unparse have been removed. Use ssri.stringify instead.
  • strict-mode: functions that accepted an optional sep argument now expect opts.sep.

1.0.0 (2017-03-23)

Features

  • api: implemented initial api (4fbb16b)

BREAKING CHANGES

  • api: Initial API established.