Tags: settlemint/sdk
Tags
fix(cli): remove minio environment variables from local instance (#1507) ## Summary Removed SETTLEMINT_MINIO_* environment variables from the local instance configuration in the CLI connect command. This prevents the CLI from installing @settlemint/sdk-minio when using --instance=local. 🤖 Generated with [Claude Code](https://claude.com/claude-code) <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Remove SETTLEMINT_MINIO_* env vars from the CLI connect command when using the local instance. This prevents installing @settlemint/sdk-minio and avoids unnecessary MinIO setup during local development. <sup>Written for commit cf0ccb7. Summary will update on new commits.</sup> <!-- End of auto-generated description by cubic. --> Co-authored-by: Claude Haiku 4.5 <[email protected]>
fix: configure setup-dependencies for SDK repo (#1503) ## Summary - Removes the separate Node.js setup step (now handled by shared-actions/setup-dependencies with `registry-url` for npm OIDC) - Disables unused tools in setup-dependencies: foundry, helm, helm-docs, python, chart-testing This reduces CI time by not installing tools the SDK repo doesn't need. ## Test plan - [ ] Verify CI passes - [ ] Verify npm publish works with OIDC 🤖 Generated with [Claude Code](https://claude.com/claude-code) <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Switch CI to shared-actions/setup-dependencies for Node and npm OIDC, remove the standalone setup-node step, and align .node-version to 24. Disable unused tools to cut CI time. - **Refactors** - Set runner: github for setup-dependencies; updated .node-version to 24. - Disabled tools: foundry, helm, helm-docs, python, chart-testing. <sup>Written for commit 3a06e87. Summary will update on new commits.</sup> <!-- End of auto-generated description by cubic. --> --------- Co-authored-by: Claude Opus 4.5 <[email protected]>
fix: configure setup-dependencies for SDK repo (#1503) ## Summary - Removes the separate Node.js setup step (now handled by shared-actions/setup-dependencies with `registry-url` for npm OIDC) - Disables unused tools in setup-dependencies: foundry, helm, helm-docs, python, chart-testing This reduces CI time by not installing tools the SDK repo doesn't need. ## Test plan - [ ] Verify CI passes - [ ] Verify npm publish works with OIDC 🤖 Generated with [Claude Code](https://claude.com/claude-code) <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Switch CI to shared-actions/setup-dependencies for Node and npm OIDC, remove the standalone setup-node step, and align .node-version to 24. Disable unused tools to cut CI time. - **Refactors** - Set runner: github for setup-dependencies; updated .node-version to 24. - Disabled tools: foundry, helm, helm-docs, python, chart-testing. <sup>Written for commit 3a06e87. Summary will update on new commits.</sup> <!-- End of auto-generated description by cubic. --> --------- Co-authored-by: Claude Opus 4.5 <[email protected]>
fix: add setup-node with registry-url for npm OIDC auth (#1502) ## Summary Adds `actions/setup-node` with `registry-url: "https://registry.npmjs.org"` to enable npm Trusted Publishing OIDC authentication. The previous change added `id-token: write` permission and `npm publish --provenance`, but npm OIDC authentication requires the `setup-node` action with `registry-url` set - this is what tells npm to use OIDC tokens for authentication. Reference: https://docs.npmjs.com/trusted-publishers/ ## Test plan - [ ] Verify CI passes - [ ] Verify packages publish successfully to npmjs.org with OIDC 🤖 Generated with [Claude Code](https://claude.com/claude-code) <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Enabled npm Trusted Publishing OIDC by adding actions/setup-node@v4 with registry-url https://registry.npmjs.org in the QA workflow. Publishing on push or release now uses the GitHub OIDC token for npm auth. <sup>Written for commit 7e209a5. Summary will update on new commits.</sup> <!-- End of auto-generated description by cubic. --> Co-authored-by: Claude Opus 4.5 <[email protected]>
fix: switch to npm Trusted Publishing with OIDC (#1501) ## Summary - Updates all SDK package publish scripts from `bun publish` to `npm publish --provenance` - Adds `id-token: write` permission to QA workflow for GitHub Actions OIDC authentication - Removes NPM_TOKEN-based authentication (replaced by Trusted Publishing OIDC) - Removes the npmrc setup step (OIDC handles auth automatically) This enables [npm Trusted Publishing](https://docs.npmjs.com/trusted-publishers) which uses GitHub Actions OIDC tokens instead of classic npm tokens, providing more secure and auditable package publishing. ## Test plan - [ ] Verify CI passes - [ ] Verify packages publish successfully to npmjs.org with provenance 🤖 Generated with [Claude Code](https://claude.com/claude-code) <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Switch SDK publishing to npm Trusted Publishing using GitHub Actions OIDC for secure, auditable releases. Enables provenance on all publishes and removes token-based auth. - **Refactors** - Replace bun publish with npm publish --provenance across all SDK packages. - Add id-token: write to the QA workflow for OIDC. - Remove NPM_TOKEN usage and the npmrc login step. - Update Node.js engine requirement to >=22. <sup>Written for commit cc63dfa. Summary will update on new commits.</sup> <!-- End of auto-generated description by cubic. --> --------- Co-authored-by: Claude Opus 4.5 <[email protected]>
chore(deps): update dependency knip to v5.73.1 (#1470) This PR contains the following updates: | Package | Type | Update | Change | OpenSSF | |---|---|---|---|---| | [knip](https://knip.dev) ([source](https://redirect.github.com/webpro-nl/knip/tree/HEAD/packages/knip)) | devDependencies | patch | [`5.73.0` -> `5.73.1`](https://renovatebot.com/diffs/npm/knip/5.73.0/5.73.1) | [](https://securityscorecards.dev/viewer/?uri=github.com/webpro-nl/knip) | --- ### Release Notes <details> <summary>webpro-nl/knip (knip)</summary> ### [`v5.73.1`](https://redirect.github.com/webpro-nl/knip/releases/tag/5.73.1) [Compare Source](https://redirect.github.com/webpro-nl/knip/compare/5.73.0...5.73.1) - Improve handling of "bridged" require calls in ts modules ([`dc546c6`](https://redirect.github.com/webpro-nl/knip/commit/dc546c67cc0a48b4da8477d1befb8a43485db022)) - Optimize workspaces finder ([`056c619`](https://redirect.github.com/webpro-nl/knip/commit/056c619dc32734f9d5520729565c380160343b7f)) - Don't add prerelease comment to closed issues ([`12f41cc`](https://redirect.github.com/webpro-nl/knip/commit/12f41cc0616dc8bce2acf18e19f6b33bba3c0b7a)) - fix(plugins/astro): srcDir config detection creating wrong entry patterns ([#​1384](https://redirect.github.com/webpro-nl/knip/issues/1384)) ([`fba49d7`](https://redirect.github.com/webpro-nl/knip/commit/fba49d7f3f8a9cd0f4c549bf00587e3c633ffc25)) - thanks [@​viktormarinho](https://redirect.github.com/viktormarinho)! </details> --- ### Configuration 📅 **Schedule**: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/settlemint/sdk). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi40Mi4yIiwidXBkYXRlZEluVmVyIjoiNDIuNDIuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Update knip devDependency from 5.73.0 to 5.73.1 to pull in upstream fixes and improved workspace detection. This only affects static analysis and has no runtime impact. <sup>Written for commit ace4ab9. Summary will update automatically on new commits.</sup> <!-- End of auto-generated description by cubic. --> Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency @modelcontextprotocol/sdk to v1.21.0 (#… …1405) This PR contains the following updates: | Package | Type | Update | Change | OpenSSF | |---|---|---|---|---| | [@modelcontextprotocol/sdk](https://modelcontextprotocol.io) ([source](https://redirect.github.com/modelcontextprotocol/typescript-sdk)) | dependencies | minor | [`1.20.2` -> `1.21.0`](https://renovatebot.com/diffs/npm/@modelcontextprotocol%2fsdk/1.20.2/1.21.0) | [](https://securityscorecards.dev/viewer/?uri=github.com/modelcontextprotocol/typescript-sdk) | --- ### Release Notes <details> <summary>modelcontextprotocol/typescript-sdk (@​modelcontextprotocol/sdk)</summary> ### [`v1.21.0`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.21.0) [Compare Source](https://redirect.github.com/modelcontextprotocol/typescript-sdk/compare/1.20.2...1.21.0) #### What's Changed - feat: pluggable JSON schema validator providers by [@​mattzcarey](https://redirect.github.com/mattzcarey) in [#​1012](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1012) - Update metadata.ts by [@​pcarleton](https://redirect.github.com/pcarleton) in [#​1010](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1010) - fix: Prefer the `token_endpoint_auth_method` response from DCR registration by [@​chipgpt](https://redirect.github.com/chipgpt) in [#​1022](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1022) - Fix: Non-existent tool, disabled tool and inputSchema validation return MCP protocol level instead of CallToolResult with isError: true by [@​KKonstantinov](https://redirect.github.com/KKonstantinov) in [#​1044](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1044) - chore: bump version to 1.21.0 for release by [@​felixweinberger](https://redirect.github.com/felixweinberger) in [#​1062](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1062) #### New Contributors - [@​chipgpt](https://redirect.github.com/chipgpt) made their first contribution in [#​1022](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1022) **Full Changelog**: <modelcontextprotocol/typescript-sdk@1.20.2...1.21.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/settlemint/sdk). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
PreviousNext