1214 Commits
Author SHA1 Message Date
zandGitHub 952b7370e2 Delete upstream workflows
This fork does not ship upstream's releases, and its hosted-runner jobs
never start here.

Claude-Session: https://claude.ai/code/session_01HuMDfgFssPUptYUzgZ6Cp8
2026-09-24 10:01:05 -07:00
zeekayandHanzo Dev 96bac43696 ci: canonical pair — hanzo.yml + forge caller
github.com has no runner for hanzo-build-linux-amd64, so a caller under
.github/workflows is a gate that can never be scheduled. This is the ~7-line
caller on the plane that can (git.hanzo.ai git-runner fleet), pinned @v1.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-06 02:36:08 -07:00
Filip Skokan 9a8d9ee580 chore: run formatter 2026-07-18 21:36:02 +02:00
Filip Skokan 3d390edc7b chore: bump packages 2026-07-18 21:33:19 +02:00
dependabot[bot]andFilip Skokan 915229f09d build(deps-dev): bump ws in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [ws](https://github.com/websockets/ws).


Updates `ws` from 8.20.1 to 8.21.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/8.20.1...8.21.1)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 8.21.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-15 07:37:45 +02:00
dependabot[bot]andFilip Skokan 30fec465ae build(deps): bump the actions group with 3 updates
Bumps the actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/cache](https://github.com/actions/cache) and [r-lib/actions/setup-pandoc](https://github.com/r-lib/actions).


Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

Updates `actions/cache` from 5.0.5 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9)

Updates `r-lib/actions/setup-pandoc` from 2.12.0 to 2.12.1
- [Release notes](https://github.com/r-lib/actions/releases)
- [Changelog](https://github.com/r-lib/actions/blob/v2-branch/NEWS.md)
- [Commits](https://github.com/r-lib/actions/compare/a51a8012b0aab7c32ef9d19bf54da93f3254335e...d3c5be51b12e724e68f33216ca3c148b66d5f0b6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: r-lib/actions/setup-pandoc
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-07-01 22:16:56 +02:00
dependabot[bot]andFilip Skokan 472695cce0 build(deps-dev): bump undici
Bumps the npm_and_yarn group with 1 update in the / directory: [undici](https://github.com/nodejs/undici).


Updates `undici` from 7.25.0 to 7.28.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.25.0...v7.28.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.28.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-06-20 12:32:05 +02:00
dependabot[bot]andFilip Skokan d4f39ce284 build(deps-dev): bump tar in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [tar](https://github.com/isaacs/node-tar).


Updates `tar` from 7.5.15 to 7.5.16
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.15...v7.5.16)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.16
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-06-17 22:13:26 +02:00
dependabot[bot]andFilip Skokan a2efbed005 build(deps): bump markdown-it
Bumps the npm_and_yarn group with 1 update in the / directory: [markdown-it](https://github.com/markdown-it/markdown-it).


Updates `markdown-it` from 14.1.1 to 14.2.0
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](https://github.com/markdown-it/markdown-it/compare/14.1.1...14.2.0)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 14.2.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-06-17 22:08:59 +02:00
dependabot[bot]andFilip Skokan 123f9ef9ad build(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates
Bumps the npm_and_yarn group with 2 updates in the / directory: [esbuild](https://github.com/evanw/esbuild) and [tmp](https://github.com/raszi/node-tmp).


Updates `esbuild` from 0.28.0 to 0.28.1
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.0...v0.28.1)

Updates `tmp` from 0.2.5 to 0.2.7
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.7)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: tmp
  dependency-version: 0.2.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-06-13 08:32:50 +02:00
dependabot[bot]andFilip Skokan fd741687eb build(deps): bump the actions group with 2 updates
Bumps the actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [dessant/lock-threads](https://github.com/dessant/lock-threads).


Updates `actions/checkout` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)

Updates `dessant/lock-threads` from 6.0.0 to 6.0.2
- [Release notes](https://github.com/dessant/lock-threads/releases)
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md)
- [Commits](https://github.com/dessant/lock-threads/compare/7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7...89ae32b08ed1a541efecbab17912962a5e38981c)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: dessant/lock-threads
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-06-03 09:56:56 +02:00
Filip Skokan 61ac701569 chore: bump packages 2026-05-28 13:52:50 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
fb6e11118d build(deps-dev): bump tmp in the npm_and_yarn group across 1 directory (#872)
Bumps the npm_and_yarn group with 1 update in the / directory: [tmp](https://github.com/raszi/node-tmp).


Updates `tmp` from 0.2.5 to 0.2.7
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.7)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-28 07:20:48 +02:00
Filip Skokan af7cd0e409 test: fix archiver
Signed-off-by: Filip Skokan <[email protected]>
2026-05-23 09:34:34 +02:00
Filip Skokan cfd90ac200 chore: bump packages 2026-05-23 09:19:53 +02:00
Filip Skokan e1ec0e0f77 build: use staged publishing for npm packages
Signed-off-by: Filip Skokan <[email protected]>
2026-05-22 20:34:59 +02:00
Filip Skokan f974e58b70 docs: update README.md and SECURITY.md to reflect passed EOL dates
Signed-off-by: Filip Skokan <[email protected]>
2026-05-04 12:44:08 +02:00
dependabot[bot]andFilip Skokan 21dedce4db build(deps): bump the actions group with 4 updates
Bumps the actions group with 4 updates: [actions/cache](https://github.com/actions/cache), [actions/setup-node](https://github.com/actions/setup-node), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [r-lib/actions](https://github.com/r-lib/actions).


Updates `actions/cache` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/668228422ae6a00e4ad889ee87cd7109ec5666a7...27d5ce7f107fe9357f9df03efb73ab90386fccae)

Updates `actions/setup-node` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e)

Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v7...v7.0.1)

Updates `r-lib/actions` from 2.11.4 to 2.12.0
- [Release notes](https://github.com/r-lib/actions/releases)
- [Changelog](https://github.com/r-lib/actions/blob/v2-branch/NEWS.md)
- [Commits](https://github.com/r-lib/actions/compare/6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590...a51a8012b0aab7c32ef9d19bf54da93f3254335e)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: r-lib/actions
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-05-02 07:25:01 +02:00
Filip Skokan 7486ecdcb1 chore: update SECURITY.md 2026-04-28 09:59:56 +02:00
github-actions[bot] 71970dc689 chore: cleanup after release 2026-04-27 16:16:31 +00:00
Filip Skokan 216f662bf1 chore(release): 6.8.4 v6.8.4 2026-04-27 18:15:49 +02:00
Filip Skokan 95253baaec chore: update CHANGELOG.md header 2026-04-27 18:14:43 +02:00
Filip Skokan 17ff77de08 fix: preserve poll abort signals on requests 2026-04-27 18:12:10 +02:00
Filip Skokan baff023379 fix: filter jwe decryption keys by algorithm 2026-04-27 18:12:10 +02:00
Filip Skokan b9f0acec03 fix: apply optional non-repudiation on generic grant ID Tokens 2026-04-27 18:11:47 +02:00
Filip Skokan 9eba32cbfd fix: retry dpop nonce errors for generic grants 2026-04-27 17:35:51 +02:00
github-actions[bot] 4a19c492a2 chore: cleanup after release 2026-04-13 15:12:18 +00:00
Filip Skokan bed83645ae chore(release): 6.8.3 v6.8.3 2026-04-13 17:11:13 +02:00
Filip Skokan 68e17e1ea7 test: fix typings build issues 2026-04-13 17:08:56 +02:00
Filip Skokan 30347de4fc test: deflake pollBackchannelAuthenticationGrant 2026-04-13 17:04:14 +02:00
Filip Skokan b180ac1858 fix(passport): delete one-time state on callback 2026-04-13 17:01:51 +02:00
Filip Skokan f660f2298e test: add coverage the passport strategy 2026-04-13 16:56:52 +02:00
Filip Skokan d7f92fd688 chore: bump packages 2026-04-13 16:08:29 +02:00
Filip Skokan 96b1976ba5 chore: fix typings in the example 2026-04-12 23:31:04 +02:00
Filip Skokan 706e950daa chore: node --run format 2026-04-12 23:26:37 +02:00
Filip Skokan 6fc0f24767 docs: note a workaround for redirect_uri with query string or bare origin
Refs: #868

Signed-off-by: Filip Skokan <[email protected]>
2026-04-12 23:24:54 +02:00
Filip Skokan 916573c6ce example: update dpop example to respect the token_type 2026-04-03 10:48:28 +02:00
dependabot[bot]andFilip Skokan 9f725fe4d0 build(deps): bump the actions group with 4 updates
Bumps the actions group with 4 updates: [actions/cache](https://github.com/actions/cache), [actions/setup-node](https://github.com/actions/setup-node), [denoland/setup-deno](https://github.com/denoland/setup-deno) and [oven-sh/setup-bun](https://github.com/oven-sh/setup-bun).


Updates `actions/cache` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/cdf6c1fa76f9f475f3d7449005a359c84ca0f306...668228422ae6a00e4ad889ee87cd7109ec5666a7)

Updates `actions/setup-node` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/6044e13b5dc448c55e2357c09f80417699197238...53b83947a5a98c8d113130e565377fae1a50d02f)

Updates `denoland/setup-deno` from 2.0.3 to 2.0.4
- [Release notes](https://github.com/denoland/setup-deno/releases)
- [Commits](https://github.com/denoland/setup-deno/compare/e95548e56dfa95d4e1a28d6f422fafe75c4c26fb...667a34cdef165d8d2b2e98dde39547c9daac7282)

Updates `oven-sh/setup-bun` from 2.1.2 to 2.2.0
- [Release notes](https://github.com/oven-sh/setup-bun/releases)
- [Commits](https://github.com/oven-sh/setup-bun/compare/3d267786b128fe76c2f16a390aa2448b815359f3...0c5077e51419868618aeaa5fe8019c62421857d6)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: denoland/setup-deno
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: oven-sh/setup-bun
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-04-02 08:03:25 +02:00
Filip Skokan 7f1043d6ea chore: bump packages 2026-03-28 13:04:49 +01:00
dependabot[bot]andFilip Skokan d40177d256 build(deps-dev): bump happy-dom
Bumps the npm_and_yarn group with 1 update in the / directory: [happy-dom](https://github.com/capricorn86/happy-dom).


Updates `happy-dom` from 20.8.4 to 20.8.8
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](https://github.com/capricorn86/happy-dom/compare/v20.8.4...v20.8.8)

---
updated-dependencies:
- dependency-name: happy-dom
  dependency-version: 20.8.8
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-03-27 06:44:39 +01:00
dependabot[bot]andFilip Skokan dc93fd9b8e build(deps): bump the npm_and_yarn group across 1 directory with 1 update
Bumps the npm_and_yarn group with 1 update in the / directory: [picomatch](https://github.com/micromatch/picomatch).


Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4)

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-03-26 08:12:43 +01:00
Filip Skokan 7903d510d7 chore: bump packages 2026-03-19 15:31:16 +01:00
dependabot[bot]andFilip Skokan f1e6f762b4 build(deps-dev): bump undici
Bumps the npm_and_yarn group with 1 update in the / directory: [undici](https://github.com/nodejs/undici).


Updates `undici` from 7.22.0 to 7.24.1
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.22.0...v7.24.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.24.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-03-14 00:22:20 +01:00
dependabot[bot]andFilip Skokan 485a21608d build(deps-dev): bump tar in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [tar](https://github.com/isaacs/node-tar).


Updates `tar` from 7.5.10 to 7.5.11
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.10...v7.5.11)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.11
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-03-11 20:47:59 +01:00
Filip Skokan 28a3ec2b86 ci: add conformance suite version override options 2026-03-11 20:43:37 +01:00
Filip Skokan a34c3ceca9 test: fix the browser test.yml section 2026-03-07 18:26:07 +01:00
Filip Skokan b690049b69 test: use playwright instead of testcafe 2026-03-07 18:21:15 +01:00
Filip Skokan 15b76e26c1 chore: bump packages 2026-03-06 15:20:23 +01:00
dependabot[bot]andFilip Skokan b8f116fccc build(deps): bump actions/upload-artifact in the actions group
Bumps the actions group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `actions/upload-artifact` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-03-01 22:43:04 +01:00
dependabot[bot]andFilip Skokan 76fa9b208f build(deps): bump minimatch
Bumps  and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together.

Updates `minimatch` from 9.0.5 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.5...v9.0.9)

Updates `minimatch` from 5.1.6 to 5.1.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.5...v9.0.9)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 5.1.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-02-28 09:25:06 +01:00