-
Notifications
You must be signed in to change notification settings - Fork 82
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: v9 #518
Conversation
BREAKING CHANGE: `createWebhooksApi()` has been removed. Use `new Webhooks()` instead
…Middleware` BREAKING CHANGE: `webhooks.middleware` has been removed. Use `createNodeMiddleware()` instead BREAKING CHANGE: `createMiddleware` has been removed. Use `createNodeMiddleware()` instead
BREAKING CHANGE: deprecated `path` option for `Webhooks` constructor has been removed. Use `createNodeMiddleware(webhooks, { path })` instead
BREAKING CHANGE: all usage of [`debug`](https://www.npmjs.com/package/debug) has been removed. Use the `log` option instead
v9 beta.1 release: https://github.com/octokit/webhooks.js/releases/tag/v9.0.0-beta.1 |
BREAKING CHANGE: `sign` and `webhooks.sign` no default to `sha256` algorithm. In order to continue to use `sha1`, replace ```js sign(secret, payload) ``` with ```js sign({ secret, algorith: "sha1" }, payload) ```
v9 beta.2 release: https://github.com/octokit/webhooks.js/releases/tag/v9.0.0-beta.2 |
BREAKING CHANGE: `webhooks.sign()` and `webhooks.verify()` are now asynchronous BREAKING CHANGE: static `sign` and `verify` methods are no longer exported. Use `@octokit/webhooks-methods` package instead
This is ready to be merged. I've pushed a @octokit/maintainers anyone of you would like to give this a review? |
Fixes #476 by removing the deprecated middleware |
v9 beta.4 release: https://github.com/octokit/webhooks.js/releases/tag/v9.0.0-beta.4 I tested it in the browser console with pkg = await import("https://cdn.skypack.dev/@octokit/[email protected]")
const webhooks = new pkg.Webhooks({
secret: "secret"
})
await webhooks.sign("payload") and it works great |
Unless there are any objects, I'd like to release this on Tuesday |
🎉 This issue has been resolved in version 9.0.0 🎉 The release is available on: Your semantic-release bot 📦🚀 |
semantic-release
I've pushed a
beta-rebased
branch which resolves the conflicts.fixes #477, fixes #515, fixes #476, fixes #475
Breaking changes
sign
algorithm forwebhooks.sign
is nowsha256
. Usewebhooks.sign({ algorithm: "sha1", secret }, payload)
to fall back tosha1
.sign
andverify
methods are no longer exported. Use@octokit/webhooks-methods
package insteadwebhooks.sign()
andwebhooks.verify()
are now asynchronousTODOs
sha256
webhooks.sign
andwebhooks.verify
async, for compatibility with Browsers and Denosign
andverify
methodsView rendered src/middleware-legacy/README.md