deps(js): bump @multiformats/multiaddr from 12.5.1 to 13.0.1 in /sdn-js by dependabot[bot] · Pull Request #9 · DigitalArsenal/space-data-network

dependabot · 2026-02-03T07:00:03Z

Bumps @multiformats/multiaddr from 12.5.1 to 13.0.1.

Release notes

Sourced from @multiformats/multiaddr's releases.

v13.0.1

13.0.1 (2025-09-04)

Bug Fixes

return deep copy of components (#429) (15e7227)

v13.0.0

13.0.0 (2025-09-02)

⚠ BREAKING CHANGES

.resolve, .isThinWaist, .protos, .fromNodeAddress, etc have been removed

Bug Fixes

simplify API (#427) (1f3fb63)

Trivial Changes

add or force update .github/workflows/stale.yml (#428) (3685574)

Changelog

Sourced from @multiformats/multiaddr's changelog.

13.0.1 (2025-09-04)

Bug Fixes

return deep copy of components (#429) (15e7227)

13.0.0 (2025-09-02)

⚠ BREAKING CHANGES

.resolve, .isThinWaist, .protos, .fromNodeAddress, etc have been removed

Bug Fixes

simplify API (#427) (1f3fb63)

Trivial Changes

add or force update .github/workflows/stale.yml (#428) (3685574)

Commits

7b3da3d chore(release): 13.0.1 [skip ci]
15e7227 fix: return deep copy of components (#429)
a0aed7f chore(release): 13.0.0 [skip ci]
1f3fb63 fix!: simplify API (#427)
3685574 chore: add or force update .github/workflows/stale.yml (#428)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Security: Switch sdn-server to hardened Emscripten WASI binary with Crypto++ constant-time operations, HMAC-DRBG entropy mixing, SecureAllocator, and optional FIPS mode. Fix Ed25519 sign/verify parameter order and mnemonic error code handling for hardened build API. Add hd_secure_dealloc support (wipe-before-free). Implement SLIP-10 Ed25519 derivation in pure Go. Storefront: Add payment chain verification, delivery hardening, and expanded store API with proper test coverage. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Update test fixtures to include uppercase characters as required by the password validation policy (12+ chars, uppercase, lowercase, digit). Add scripts/ci-local.sh to run CI checks locally when GitHub Actions minutes are exhausted, with pre-push hook for automatic validation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

… BIP-44 derivation - Fix /admin → /admin/ redirect so React SPA relative asset paths resolve correctly (root cause of CSS text/plain and JS 404 errors in production) - Change HD wallet derivation from custom coin type 1957 to standard BIP-44 Bitcoin (m/44'/0'/...) across Go server, JS SDK, and documentation - Add xpub-based TOFU auth with SDN extended public key format - Add frontend manager for admin-uploadable public homepage - Add local dev environment: config/dev.yaml, scripts/dev-local.sh, Dockerfile.dev, and docker-compose.dev.yaml with test wallet - Add pre-commit and post-commit git hooks for CI and auto-deploy Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

dependabot · 2026-02-15T17:02:39Z

Dependabot couldn't fetch all your path-based dependencies. Because of this, Dependabot cannot update this pull request.

- Add demo WASM module (demo.c) with exported computation functions - Add build-demo-wasm.js encryption script (AES-256-GCM + per-domain KEK wrapper) - Add server-side demo API (GET /demo, /api/v1/demo/payload, /api/v1/demo/info) - Add browser-side P-256 ECDH key exchange demo with SubtleCrypto (zero deps) - Re-enable HTTP key exchange endpoints on the OrbPro key broker plugin - Add IPFS pinning support for demo payload (optional, via ipfs_api_url config) - Fix docs.html mobile responsiveness (overflow-x, word-break, responsive breakpoints) - Source demo/.demo-env in dev-local.sh for key broker secrets - Add demo secrets to .gitignore Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add overflow containment and white-space: nowrap throughout the wallet network card hierarchy so long blockchain addresses and derivation paths properly truncate with ellipsis instead of overflowing the viewport. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Replace inline flex styles with .arch-row-split class that switches from side-by-side to column layout at the 734px mobile breakpoint. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Fixes CI failure where submodule init could not find the URL for packages/sdn-license-plugin. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

The built-in pages-build-deployment used submodules: recursive which failed because sdn-license-plugin is a private repo. The custom workflow checks out without submodules since only docs/ is needed. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

The built-in GitHub Pages builder always clones submodules recursively. Since sdn-license-plugin is a private repo, the default GITHUB_TOKEN cannot access it, causing the checkout to fail with "Repository not found". Also removes the temporary custom pages workflow since the legacy builder will work once the submodule is removed. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

…k theme issues - Combine Trust, Wallet, and Peers into a single Peers page with Network/Trust/Wallet tabs (Trust and Wallet tabs are admin-only) - Remove Trust and Wallet from sidebar nav (8 items instead of 10) - Reduce sidebar icon sizes and padding so items fit without scrolling - Add dark theme overrides for Browse/Inspect buttons and path input - Fix header button vertical centering with flexbox gap layout - Update trust badge in SdnPeersPanel from link to static span Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Remove mb2 classes from the explore form input and button container that were creating extra bottom margin, causing the visible elements to sit above center within the flex-aligned header bar. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

…odal Standardize trust level display as colored pill badges across navbar and peers panel. Clicking any badge opens an informational modal explaining the PGP-inspired web of trust model. Sign out now requires confirmation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Fix selectIpfsApiUrl → selectIpfsApiAddress selector crash on Plugins page. Add comprehensive dark mode overrides for ipld-explorer-components: entry titles, links table, react-inspector data tree, CID info, and breadcrumbs. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

…llet-ui CSS fix - Add Encrypted Peer Messaging (EPM) module with PubSub, protocol, persistence, and peer graph - Add peer directory with detail modals, identity cards, and force/tree graph visualization - Rebrand welcome page: "What is IPFS?" → "What is the Space Data Network?" with SDN-focused content - Update status text and translations from IPFS to Space Data Network - Fix wallet-ui button styling by scoping global CSS resets to exclude #hd-wallet-ui-container - Bump webui version to 4.11.0 to invalidate i18n localStorage cache - Update deploy script with Kubo installation/configuration - Add baked keys and discovery modules to sdn-js SDK Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

dependabot · 2026-02-16T18:09:59Z

Dependabot couldn't fetch all your path-based dependencies. Because of this, Dependabot cannot update this pull request.

dependabot · 2026-02-17T05:05:36Z

Dependabot couldn't fetch all your path-based dependencies. Because of this, Dependabot cannot update this pull request.

…ds, and docs Server: derive libp2p PeerID from secp256k1 at m/44'/0'/0' (xpub-based identity), encrypt BIP-39 mnemonic at rest with XChaCha20-Poly1305 + Argon2id, add show-identity and derive-xpub CLI commands, auto-migrate plaintext mnemonics on startup. SDK: integrate hd-wallet-wasm for secp256k1 key derivation, PeerID computation from xpub, HDKeyStore (IndexedDB + WebCrypto), and replace @libp2p/peer-id-factory usage. Docs: update key derivation tree, add secp256k1 identity section, CLI commands reference, key security section, and YAML config examples. WebUI: fix EPM editor lint errors, update identity card and auth bundle. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Bumps [@multiformats/multiaddr](https://github.com/multiformats/js-multiaddr) from 12.5.1 to 13.0.1. - [Release notes](https://github.com/multiformats/js-multiaddr/releases) - [Changelog](https://github.com/multiformats/js-multiaddr/blob/main/CHANGELOG.md) - [Commits](multiformats/js-multiaddr@v12.5.1...v13.0.1) --- updated-dependencies: - dependency-name: "@multiformats/multiaddr" dependency-version: 13.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-02-24T13:40:06Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

TJKoury added 30 commits March 1, 2024 12:28

port

2917436

update channel

45a0d36

update to use air

5d10cc9

update to method

32223f0

update to method

b05fd90

changed to variadic

ab05473

update deps

12cbf8d

updated deps

52399b2

address generation working

6a834d6

reorg

131257e

added test

300e7c9

update tests

763454b

setup

54ae350

update test

d756376

update test for database

821f6b0

added protocol test

472a4aa

pnm protocol working

0e295f9

response formatting

19966fc

remove file

8c5281b

remove tmp files

140cb54

remove tmp files

c8e4e9e

pnm protocol working

96f3541

start cli

bece201

stealth addr

091e162

moved namespaces

1dd712f

updates

a57d0b2

updates

7844d7a

updates

ae247c2

works

8c23dd8

updated logic in prep for EPM storage

173435c

TJKoury and others added 5 commits February 13, 2026 09:19

Harden SDN auth and API surfaces

187722f

feat: add auth, trust, and wallet flows

315cf52

TJKoury and others added 12 commits February 15, 2026 21:12

Stack signing/encryption key boxes vertically on mobile

c373834

Replace inline flex styles with .arch-row-split class that switches from side-by-side to column layout at the 734px mobile breakpoint. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Remove identity derivation diagram section from landing page

e14d5ae

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add missing sdn-license-plugin submodule entry to .gitmodules

6e0f4b9

Fixes CI failure where submodule init could not find the URL for packages/sdn-license-plugin. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

TJKoury and others added 3 commits February 18, 2026 13:56

chore: bump hd-wallet-wasm to 1.5.4 in sdn-js

276625f

dependabot Bot force-pushed the dependabot/npm_and_yarn/sdn-js/multiformats/multiaddr-13.0.1 branch 2 times, most recently from bb5b9d7 to c30a915 Compare February 24, 2026 04:55

TJKoury closed this Feb 24, 2026

TJKoury force-pushed the main branch from 4f0cabc to e284137 Compare February 24, 2026 13:40

TJKoury force-pushed the dependabot/npm_and_yarn/sdn-js/multiformats/multiaddr-13.0.1 branch from c30a915 to a8f1a17 Compare February 24, 2026 13:40

dependabot Bot deleted the dependabot/npm_and_yarn/sdn-js/multiformats/multiaddr-13.0.1 branch February 24, 2026 13:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps(js): bump @multiformats/multiaddr from 12.5.1 to 13.0.1 in /sdn-js#9

deps(js): bump @multiformats/multiaddr from 12.5.1 to 13.0.1 in /sdn-js#9
dependabot[bot] wants to merge 256 commits into
mainfrom
dependabot/npm_and_yarn/sdn-js/multiformats/multiaddr-13.0.1

dependabot Bot commented on behalf of github Feb 3, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Feb 15, 2026

Uh oh!

dependabot Bot commented on behalf of github Feb 16, 2026

Uh oh!

dependabot Bot commented on behalf of github Feb 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Feb 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v13.0.1

13.0.1 (2025-09-04)

Bug Fixes

v13.0.0

13.0.0 (2025-09-02)

⚠ BREAKING CHANGES

Bug Fixes

Trivial Changes

13.0.1 (2025-09-04)

Bug Fixes

13.0.0 (2025-09-02)

⚠ BREAKING CHANGES

Bug Fixes

Trivial Changes

Uh oh!

dependabot Bot commented on behalf of github Feb 15, 2026

Uh oh!

dependabot Bot commented on behalf of github Feb 16, 2026

Uh oh!

dependabot Bot commented on behalf of github Feb 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Feb 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Feb 3, 2026 •

edited

Loading