540 Commits
Author SHA1 Message Date
zandGitHub d726c458ca Delete upstream workflows
This fork does not ship upstream's releases, and its hosted-runner jobs
never start here.

Claude-Session: https://claude.ai/code/session_01HuMDfgFssPUptYUzgZ6Cp8
2026-09-24 10:00:49 -07:00
zeekayandHanzo Dev 328a17170e ci: canonical pair — hanzo.yml + forge caller
github.com has no runner for hanzo-build-linux-amd64, so a caller under
.github/workflows is a gate that can never be scheduled. This is the ~7-line
caller on the plane that can (git.hanzo.ai git-runner fleet), pinned @v1.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-06 02:30:58 -07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1ab95a36ef chore(deps): bump the codeql group with 3 updates (#526)
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 16:01:28 +05:30
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
898654724c chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#525)
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 11:40:01 +05:30
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
0ca5308f21 chore(deps): bump the codeql group with 3 updates (#524)
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 11:36:32 +05:30
Chetan SharmaandGitHub 5533499b42 chore: group codeql-action dependabot updates (#523) 2026-07-21 11:33:36 +05:30
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
602a115460 chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#519)
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-20 21:42:21 +05:30
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
0f4a2d354d chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#510)
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-19 14:15:44 +05:30
Chetan SharmaandGitHub b03a4f71d7 Release v4.1.0 (#509) v4.1.0 2026-06-19 14:03:20 +05:30
Chetan SharmaandGitHub 4b71ec8553 feat: add cacheMaxAgeFallback and onStaleCacheFallback for graceful JWKS degradation during outages (#502) 2026-06-19 13:50:21 +05:30
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4382caacda chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 (#504)
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-15 12:19:37 +05:30
José Carlos ChávezandGitHub fcd4d1fb72 chore(security): uses pinned versions of actions (#505) 2026-06-15 12:13:56 +05:30
Chetan SharmaandGitHub 4d8b0bd6f9 chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#503) 2026-05-28 13:07:05 +05:30
dependabot[bot]andGitHub 4955eaf076 chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/57e3a136b779b570ffcdbf80b3bdc90e7fab3de2...e79a6962e0d4c0c17b229090214935d2e33f8354)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-05-19 21:00:53 +00:00
Chetan SharmaandGitHub 65e1a99f08 chore(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 (#499) 2026-04-16 17:48:52 +05:30
dependabot[bot]andGitHub 59555c3b5c chore(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.2 to 6.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/671740ac38dd9b0130fbe1cec585b89eea48d3de...57e3a136b779b570ffcdbf80b3bdc90e7fab3de2)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-04-16 12:08:20 +00:00
Chetan SharmaandGitHub 157cfad8cc docs: add breaking-change note for require(esm) and Jest (#494) 2026-03-30 15:37:21 +05:30
Chetan SharmaandGitHub 1231e04c1c chore: remove package-lock (#495) 2026-03-26 16:07:41 +05:30
Chetan Sharma 96a53caeeb master synx 2026-03-26 16:00:43 +05:30
Chetan SharmaandGitHub 61b8bdfd6f chore(deps): bump koa from 2.16.3 to 3.1.2 in /examples/koa-demo (#488) 2026-03-16 23:45:01 +05:30
dependabot[bot]andGitHub 5d4fa4e073 chore(deps): bump koa from 2.16.3 to 3.1.2 in /examples/koa-demo
Bumps [koa](https://github.com/koajs/koa) from 2.16.3 to 3.1.2.
- [Release notes](https://github.com/koajs/koa/releases)
- [Changelog](https://github.com/koajs/koa/blob/master/History.md)
- [Commits](https://github.com/koajs/koa/compare/v2.16.3...v3.1.2)

---
updated-dependencies:
- dependency-name: koa
  dependency-version: 3.1.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-03-16 18:11:17 +00:00
Chetan SharmaandGitHub e6bd12378e chore(deps): bump qs from 6.14.1 to 6.14.2 in /examples/passport-demo (#487) 2026-03-16 23:40:03 +05:30
dependabot[bot]andGitHub d487f947f6 chore(deps): bump qs from 6.14.1 to 6.14.2 in /examples/passport-demo
Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-03-16 18:05:15 +00:00
Chetan SharmaandGitHub 530f9771c6 chore(deps): bump qs from 6.14.1 to 6.14.2 in /examples/express-demo (#484) 2026-03-16 23:34:00 +05:30
dependabot[bot]andGitHub 6316d83853 chore(deps): bump qs from 6.14.1 to 6.14.2 in /examples/express-demo
Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-03-16 17:57:40 +00:00
Chetan SharmaandGitHub 69ccb0d74f chore(deps-dev): bump koa from 2.16.3 to 3.1.2 (#491) 2026-03-16 23:25:46 +05:30
dependabot[bot]andGitHub a35b4447b7 chore(deps-dev): bump koa from 2.16.3 to 3.1.2
Bumps [koa](https://github.com/koajs/koa) from 2.16.3 to 3.1.2.
- [Release notes](https://github.com/koajs/koa/releases)
- [Changelog](https://github.com/koajs/koa/blob/master/History.md)
- [Commits](https://github.com/koajs/koa/compare/v2.16.3...v3.1.2)

---
updated-dependencies:
- dependency-name: koa
  dependency-version: 3.1.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-03-16 17:30:23 +00:00
Chetan Sharma a3fde30d64 .gitignore-fix comment 2026-03-13 12:10:07 +05:30
Chetan Sharma ad6206a9f0 add build step before synk workflow 2026-03-13 12:06:15 +05:30
Chetan Sharma ccb1c4a439 remove package-lock 2026-03-13 11:55:13 +05:30
Chetan Sharma 3adeb05a33 changelog text correction 2026-03-13 11:19:55 +05:30
Chetan Sharma 02169adc04 changelog: document non-standard runtimes like jest don't support require(esm) 2026-03-09 19:06:23 +05:30
Chetan SharmaandGitHub db51fbe6c7 Release v4.0.1 (#492) v4.0.1 2026-03-02 16:18:32 +05:30
Chetan Sharma 253627a5c6 Release v4.0.1 2026-03-02 15:05:33 +05:30
Chetan SharmaandGitHub c155367793 chore: update lru-memoizer to v3 (#476) 2026-03-02 14:55:34 +05:30
Isidro Torregrosa e0e521637d update lru memoizer and add cache maxage test 2026-03-01 15:33:45 +01:00
Chetan SharmaandGitHub 91dabb29b0 Release v4.0.0 (#490) v4.0.0 2026-02-27 14:02:44 +05:30
Chetan SharmaandGitHub b62977338a Revise CHANGELOG for v4.0.0 release
Updated changelog to reflect breaking changes and version upgrades.
2026-02-27 13:47:34 +05:30
Chetan Sharma 784f22313f Release v4.0.0 2026-02-27 13:33:41 +05:30
Chetan SharmaandGitHub 393a82a7f0 feat: upgrade jose dependency to v6 (#486) 2026-02-27 13:17:02 +05:30
Chetan Sharma 25c2d92ee3 sync master 2026-02-25 14:29:54 +05:30
Chetan SharmaandGitHub 35e979e582 chore: upgrade minimum Node.js runtime to 20.19.0 (#485) 2026-02-25 14:27:23 +05:30
Chetan Sharma 61a1a9a1e8 fix lint 2026-02-25 14:04:59 +05:30
Chetan Sharma 18bfa79b5b add spec for utils.js 2026-02-25 13:57:52 +05:30
Chetan Sharma c6f6832603 remove ES256K from allowed signature alg 2026-02-25 13:41:06 +05:30
Chetan Sharma bb22ab4f37 update codeconv action to match ^20 2026-02-25 13:15:20 +05:30
Chetan Sharma 0c5b63e65f Update build matrix to use latest of node vers 2026-02-20 13:45:48 +05:30
Chetan Sharma 3507a3f276 update workflow/build matrix 2026-02-18 13:49:09 +05:30
Chetan Sharma 74e21dedec upgrade jose@6 2026-02-17 20:38:07 +05:30
Chetan Sharma f7cb4a6994 upgrade node@20, regenrate lock, workflows/v6 2026-02-16 16:56:06 +05:30