Skip to content

release: v0.15.0#123

Merged
KenLSM merged 38 commits intoreleasefrom
develop
Nov 3, 2025
Merged

release: v0.15.0#123
KenLSM merged 38 commits intoreleasefrom
develop

Conversation

@KenLSM
Copy link
Contributor

@KenLSM KenLSM commented Nov 3, 2025 •
edited
Loading

To catchup release branch with develop branch.

Note: We've not been synchronising release branch as publication was not triggered through CI.

Yuan Ruo and others added 30 commits June 18, 2021 15:12
Merge pull request #76 from opengovsg/release-v0.9.0
57d64bc 
chore: merge v0.9.0 into develop
@timotheeg @karrui
chore(deps): Upgrade vulnerable axios version (#78)
8da2947 
* chore(deps): Upgrade vulnerable axios version

* chore: use lockfileVersion 2 for package-lock.json

* fix(deps): update axios to 0.24.0

Co-authored-by: Kar Rui Lau <karrui.lau@gmail.com>
@karrui
chore: run npm audit fix and update relevant deps (#80)
0041960
@justynoh
fix: allow empty field titles in decrypted responses (#86)
504be65
@karrui
chore: bump version to v0.10.0
e094041
@karrui
fix: run npm audit fix so typescript packages are the correct versions
2bdbf89 
so the build can work successfully
@karrui
docs: add changelog and version script
f207c3e
@karrui
Merge pull request #87 from opengovsg/release-v0.10.0
083556f 
build: release v0.10.0
@dependabot
build(deps): bump json5 from 1.0.1 to 1.0.2 (#88)
b8c2bf2 
Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v1.0.1...v1.0.2)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@snyk-bot @wanlingt
fix: upgrade axios from 0.24.0 to 0.25.0 (#81)
5814c76 
Snyk has created this PR to upgrade axios from 0.24.0 to 0.25.0.

See this package in npm:
https://www.npmjs.com/package/axios

See this project in Snyk:
https://app.snyk.io/org/formsg/project/c69f3c8b-d305-4604-ac27-253ffb6333c2?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: wanlingt <wanling@open.gov.sg>
@KenLSM
Update README.md to include existence of sister SDks
e3f7edc 
Added link to Python and Ruby libraries
@KenLSM
Merge pull request #90 from opengovsg/add-sister-sdks
7ba2a38 
Update README.md to include existence of sister SDks
@KenLSM @tshuli
chore(readme): add wording for period inclusion of unstable fields (#94)
c07f4a0 
* chore: add wording for period inclusion of unstable fields

* Update README.md

Co-authored-by: tshuli <63710093+tshuli@users.noreply.github.com>

---------

Co-authored-by: tshuli <63710093+tshuli@users.noreply.github.com>
@KenLSM
Update ci.yml (#96)
9cd2b71 
* Update ci.yml

* Update ci.yml to use node-version 18
@dependabot
build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 (#97)
1d7ac98 
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.5.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5)

---
updated-dependencies:
- dependency-name: word-wrap
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): bump @babel/traverse from 7.16.3 to 7.23.3 (#99)
e7267c9 
Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.16.3 to 7.23.3.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.23.3/packages/babel-traverse)

---
updated-dependencies:
- dependency-name: "@babel/traverse"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@justynoh @KenLSM
chore: upgrade axios to 1.6.2 (#93)
a017183 
* chore: upgrade axios to 1.6.2

* fix: update outdated packages that caused test failures

* chore: update package-lock

---------

Co-authored-by: Ken <ken@open.gov.sg>
@KenLSM
Create LICENSE (#95)
aef81c6 
* Create LICENSE

* Rename LICENSE to LICENSE.md
@justynoh
build: bump version to 0.11.0 (#100)
4de687d
@justynoh
feat: mrf crypto (#101)
cfe99cb 
* feat: mrf crypto

* fix: export crypto-v3

* chore: update encodings

* feat: coalesce encryption and decryption steps

* chore: add logging for errors

* chore: remove validation check

* chore: skip catching errors

* chore: remove more error catching

* chore: log submission secret key

* chore: comment code

* test: add tests to crypto-v3

* feat: return submission secret key in the clear for workflows

* test: update test infra to use bigger heap size

* feat: provide submission public key as part of encrypted payload

* feat: attachments

* test: update tests

* fix: revert for backward-compatibility

* chore: update function documentation
@justynoh
build: bump version to 0.12.0-alpha.1 (#102)
2fa24a8
@snyk-bot
fix: package.json & package-lock.json to reduce vulnerabilities (#103)
06a15aa 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-6144788

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
@KenLSM
chore: update readme for paymentContent (#105)
39f5963 
* chore: update readme for paymentContent

* chore: add payment content fields
@dependabot
build(deps): bump axios from 1.6.4 to 1.7.4 (#110)
c41f175 
Bumps [axios](https://github.com/axios/axios) from 1.6.4 to 1.7.4.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.6.4...v1.7.4)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@KenLSM
0.12.0
5c34cfe
@scottheng96
add address to field type (#111)
5608272
@KenLSM
0.13.0
cd9e78d
@dependabot
build(deps): bump follow-redirects from 1.15.4 to 1.15.6 (#107)
5cbe7d4 
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.4 to 1.15.6.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.4...v1.15.6)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): bump braces from 3.0.2 to 3.0.3 (#109)
72ed79b 
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@scottheng96
updated readme with address answerArray (#112)
bea3a72
KenLSM and others added 8 commits February 17, 2025 21:04
@KenLSM
Merge remote-tracking branch 'origin/develop' into develop
0f40005
@KenLSM
Merge pull request #114 from opengovsg/release-v0.13.0
2c59c05 
Release v0.13.0
@littlemight
Merge pull request #115 from opengovsg/fix/ci-cache
35d8fdb 
fix: upgrade actions/cache
@scottheng96
add signature to supported form fields
31db628
@scottheng96
Merge pull request #118 from opengovsg/feat/signature
0e0afb4 
feat: add signature to supported form fields
@KenLSM
chore: remove build status from README.md (#120)
76664dd
@scottheng96
feat: add verified content to v3 (#121)
add008c 
* add verifiedContent decryption support for cryptoV3

* move decryption of verifiedContent to decryptFromSubmissionkey; use submissionKey

* remove unused variables

* bumped version to 0.14.0 to match latest

* fixed tests

* added to tests

* replace coveralls with coveralls-next

* resolved tests

* revert coveralls to use v2

* rethrow missingPublicKeyError

* add missing }

* added comment to explain v1 vs v3 decryption differences

* removed coveralls package

* updated explanataion for v1 vs v3 content
@scottheng96 @KenLSM
add publish script for OIDC support (#122)
2a965e1 
* add publish script for OIDC support

* updated changelog to reflect correct version changes

* only publish when releasing

---------

Co-authored-by: Ken <ken@open.gov.sg>
@socket-security
Copy link

socket-security bot commented Nov 3, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedjest@​25.3.0 ⏵ 29.7.01001006892 -3100
Updatedeslint-config-prettier@​8.3.0 ⏵ 8.10.2100 +110072 +187100
Updated@​types/​jest@​25.2.1 ⏵ 29.5.14100 +110077 +179100
Updated@​babel/​cli@​7.8.4 ⏵ 7.28.3100 +110077 +193 -1100
Updated@​babel/​preset-env@​7.9.0 ⏵ 7.28.39710077 -195100
Addedauto-changelog@​2.5.09910010078100
Updated@​babel/​core@​7.9.0 ⏵ 7.28.49810080 +195100
Updated@​types/​node@​13.11.1 ⏵ 18.19.12710010081 +296100
Updatedeslint-plugin-import@​2.23.3 ⏵ 2.32.09810010082100
Updatedjest-mock-axios@​4.4.0 ⏵ 4.9.010010010087 +8100
Updatedeslint-plugin-prettier@​3.4.0 ⏵ 3.4.1100 +110010090100
Updatedtypescript@​3.8.3 ⏵ 4.9.5100 +110090 -1010090 +10
Updatedts-jest@​25.3.1 ⏵ 29.4.497 +110094 +493 +6100
Updatedeslint-plugin-jest@​24.3.6 ⏵ 24.7.099100100 +195 +5100
Updated@​typescript-eslint/​eslint-plugin@​4.25.0 ⏵ 4.33.0100 +1100100 +196 -1100
Updatedaxios@​0.21.1 ⏵ 1.12.299100 +60100 +197100

View full report

@KenLSM
Copy link
Contributor Author

KenLSM commented Nov 3, 2025

Bypassing rules as we're resetting up the repo.

@KenLSM KenLSM merged commit d13fd92 into release Nov 3, 2025
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

7 participants

@KenLSM @timotheeg @karrui @justynoh @snyk-bot @scottheng96 @littlemight