build(deps): bump net-did → 2.3.0 & NetCrypto → 1.2.0; release v1.2.0 (#47)#48
Merged
Merged
Conversation
…release v1.2.0 (#47) Bumps the DID + crypto foundation pins so a wallet pulling DidComm.* transitively resolves the did:webvh method driver at ≥ 2.2.0, letting the downstream net-wallet-sdk 0.2.0 graph converge on the DidUpdateResult evidence its identity document-update / key-rotation integrity contract requires. DidComm references NetDid.Method.WebVh, so this is the key convergence step. Pinned to the current latest net-did 2.3.0 (not the issue's 2.2.0 floor): additive did:webvh Update/Deactivate/resolution security + conformance hardening (net-did#82/#91/#101); DidComm consumes net-did for resolution only, so it is unaffected. NetCrypto 1.2.0 is required by net-did 2.3.0, so the direct pin now matches the transitive graph (no NU1605). DataProofsDotnet.Jose stays at 1.1.0. Bumps DidCommVersion to 1.2.0. Verified: restore clean, Release build 0 warnings (warnings-as-errors), 672 tests pass (537 Core + 135 Interop), resolved graph NetDid.Core/2.3.0 + NetCrypto/1.2.0. Closes #47 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
moisesja
commented
Jul 14, 2026
moisesja
left a comment
Owner
Author
There was a problem hiding this comment.
Changelog changes are missing
Makes the version headings (`[1.2.0]`, `[1.1.0]`, `[0.1.0-preview.1]`) resolve as reference-style links and points `[Unreleased]` at the post-v1.2.0 compare range, so CHANGELOG.md is a proper Keep-a-Changelog release artifact. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Bumps the DID + crypto foundation pins and releases DidComm v1.2.0. Closes #47.
NetDid.*2.0.1 → 2.3.0 —NetDid.Core,NetDid.Extensions.DependencyInjection,NetDid.Method.Key,NetDid.Method.Peer,NetDid.Method.WebVhNetCrypto1.1.0 → 1.2.0DidCommVersion→ 1.2.0DataProofsDotnet.Joseunchanged at 1.1.0Why 2.3.0 (not the issue's 2.2.0 floor)
DidComm is the foundation library that references
NetDid.Method.WebVh, so bumping it is the key step for the downstream net-wallet-sdk 0.2.0 transitive graph to converge on adid:webvhdriver ≥ 2.2.0 (the floor its FR-ID-10DidUpdateResultevidence needs). We pin the current latest, 2.3.0, which satisfies and exceeds that floor:did:webvhUpdate/Deactivate/resolution security + conformance hardening (stricter SCID identity + controller-proof validation, post-sign nested-member tamper fixes — net-did#82/#91/#101). Resolution-only usage is unaffected.Compatibility / notes
packages.lock.jsonexists in this repo, so the issue's lock-regeneration /--locked-modestep is N/A here.DataProofsDotnet.Jose 1.0.1reference in the PRD was corrected to 1.1.0 in passing.Verification
dotnet restore— clean, no NU1605dotnet build -c Release— 0 warnings / 0 errors (TreatWarningsAsErrors=true, so a downgrade or API break would fail)dotnet test— 672 passed (537 Core + 135 Interop), 0 failed, 0 skippedNetDid.Core/2.3.0+NetCrypto/1.2.0; assembly informational version1.2.0🤖 Generated with Claude Code