0 Fork 0

mirror of https://github.com/PR0M3TH3AN/bitvid.git synced 2026-10-27 07:52:24 +00:00

Files

T

google-labs-jules[bot]andPR0M3TH3AN 8a1d843c24 chore(audit): daily dependency scan and triage

- Generated artifacts/npm-audit.json, artifacts/npm-outdated.json, artifacts/deps-report.md
- Attempted esbuild upgrade (0.27.2 -> 0.27.3) but reverted due to E2E environment failure (see issues/upgrade-esbuild.md)
- Flagged nostr-tools for manual review (see issues/upgrade-nostr-tools.md)
- Updated DECISIONS.md and TODO.md

Co-authored-by: PR0M3TH3AN <[email protected]>

2026-02-12 14:49:04 +00:00

1.3 KiB

Raw Blame History

Upgrade Proposal: `nostr-tools` (v2.19.4 -> v2.23.0)

Status: REVIEW-REQUIRED (Protocol Library) Priority: High (Security/Protocol Compliance)

Context

nostr-tools is the core protocol library for bitvid. AGENTS.md explicitly forbids automatic upgrades for crypto/protocol libraries.

Version Changes

Current: 2.19.4
Target: 2.23.0
Changelog: Link to nostr-tools releases
- Contains updates to NIP-44 encryption/decryption? (Check changelog)
- Contains updates to NIP-01 signatures?

Risk Assessment

High Risk: Changes to signing or encryption could break user logins or private messaging (NIP-04/NIP-44).
Compliance: Must ensure nip04_44_compliance.test.mjs passes.

Test Plan

Unit Tests: Run npm run test:unit.
Compliance Tests: Explicitly run node scripts/run-targeted-tests.mjs tests/compliance/nip04_44_compliance.test.mjs.
E2E Tests: Verify login flow and DM flow.
Manual QA:
- Log in with NIP-07 extension.
- Send/Receive DM.
- Publish video event.

Action Items

Create branch chore/upgrade-nostr-tools
Bump version.
Run full test suite.
Review changelog for breaking changes in SimplePool or finalizeEvent.
Request maintainer review.

1.3 KiB Raw Blame History

Upgrade Proposal: nostr-tools (v2.19.4 -> v2.23.0)