Skip to content

build(deps): bump net-did → 2.3.0 & NetCrypto → 1.2.0; release v1.2.0 (#47)#48

Merged
moisesja merged 2 commits into
mainfrom
feat/deps-net-did-2.3-netcrypto-1.2-47
Jul 14, 2026
Merged

build(deps): bump net-did → 2.3.0 & NetCrypto → 1.2.0; release v1.2.0 (#47)#48
moisesja merged 2 commits into
mainfrom
feat/deps-net-did-2.3-netcrypto-1.2-47

Conversation

@moisesja

Copy link
Copy Markdown
Owner

Summary

Bumps the DID + crypto foundation pins and releases DidComm v1.2.0. Closes #47.

  • NetDid.* 2.0.1 → 2.3.0NetDid.Core, NetDid.Extensions.DependencyInjection, NetDid.Method.Key, NetDid.Method.Peer, NetDid.Method.WebVh
  • NetCrypto 1.1.0 → 1.2.0
  • DidCommVersion → 1.2.0
  • DataProofsDotnet.Jose unchanged at 1.1.0

Why 2.3.0 (not the issue's 2.2.0 floor)

DidComm is the foundation library that references NetDid.Method.WebVh, so bumping it is the key step for the downstream net-wallet-sdk 0.2.0 transitive graph to converge on a did:webvh driver ≥ 2.2.0 (the floor its FR-ID-10 DidUpdateResult evidence needs). We pin the current latest, 2.3.0, which satisfies and exceeds that floor:

  • DidComm consumes net-did for DID resolution only; 2.1→2.3 is additive there.
  • 2.3.0 is did:webvh Update/Deactivate/resolution security + conformance hardening (stricter SCID identity + controller-proof validation, post-sign nested-member tamper fixes — net-did#82/#91/#101). Resolution-only usage is unaffected.
  • Both 2.2.0 and 2.3.0 declare a dependency on NetCrypto 1.2.0, so the direct pin now matches the transitive graph — no NU1605 downgrade.

Compatibility / notes

  • No source changes — pure version-only bump.
  • No packages.lock.json exists in this repo, so the issue's lock-regeneration / --locked-mode step is N/A here.
  • A stale DataProofsDotnet.Jose 1.0.1 reference in the PRD was corrected to 1.1.0 in passing.

Verification

  • dotnet restore — clean, no NU1605
  • dotnet build -c Release0 warnings / 0 errors (TreatWarningsAsErrors=true, so a downgrade or API break would fail)
  • dotnet test672 passed (537 Core + 135 Interop), 0 failed, 0 skipped
  • Resolved graph confirmed NetDid.Core/2.3.0 + NetCrypto/1.2.0; assembly informational version 1.2.0

🤖 Generated with Claude Code

…release v1.2.0 (#47)

Bumps the DID + crypto foundation pins so a wallet pulling DidComm.*
transitively resolves the did:webvh method driver at ≥ 2.2.0, letting the
downstream net-wallet-sdk 0.2.0 graph converge on the DidUpdateResult evidence
its identity document-update / key-rotation integrity contract requires.
DidComm references NetDid.Method.WebVh, so this is the key convergence step.

Pinned to the current latest net-did 2.3.0 (not the issue's 2.2.0 floor):
additive did:webvh Update/Deactivate/resolution security + conformance
hardening (net-did#82/#91/#101); DidComm consumes net-did for resolution only,
so it is unaffected. NetCrypto 1.2.0 is required by net-did 2.3.0, so the direct
pin now matches the transitive graph (no NU1605). DataProofsDotnet.Jose stays
at 1.1.0. Bumps DidCommVersion to 1.2.0.

Verified: restore clean, Release build 0 warnings (warnings-as-errors),
672 tests pass (537 Core + 135 Interop), resolved graph NetDid.Core/2.3.0 +
NetCrypto/1.2.0.

Closes #47

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@moisesja moisesja added this to the 1.2.0 milestone Jul 14, 2026
@moisesja moisesja self-assigned this Jul 14, 2026

@moisesja moisesja left a comment

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changelog changes are missing

Makes the version headings (`[1.2.0]`, `[1.1.0]`, `[0.1.0-preview.1]`) resolve
as reference-style links and points `[Unreleased]` at the post-v1.2.0 compare
range, so CHANGELOG.md is a proper Keep-a-Changelog release artifact.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@moisesja
moisesja merged commit a493881 into main Jul 14, 2026
1 of 2 checks passed
@moisesja
moisesja deleted the feat/deps-net-did-2.3-netcrypto-1.2-47 branch July 14, 2026 03:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bump net-did 2.0.1 → 2.2.0 and NetCrypto 1.1.0 → 1.2.0 (downstream convergence for net-wallet-sdk 0.2.0)

1 participant