All pull requests

Pull requests

• chore(sdk): bump follow-redirects from 1.16.1 to 1.16.2 in /lib in the dev-security group across 1 directory

  dependenciesjavascript
  #1129·dependabot[bot] opened Nov 2, 2026Bot·

  ·
  2

• chore(cli): bump the security group across 1 directory with 2 updates

  dependenciesjavascript
  #1125·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  2

• chore(main): release sdk 0.24.0

  autorelease: pending
  #1124·opentdf-automation[bot] opened Oct 23, 2026Bot·

  ·
  13

• fix(sdk): vendor jose JWT helpers by export so 6.x bumps don't break the build (DSPX-5365)

  #1122·dmihalcik-virtru opened Oct 23, 2026Member·

  ·
  3

• feat(cli): add validate command (DSPX-5351)

  #1119·dmihalcik-virtru opened Oct 23, 2026Member·

  ·
  6

• fix(sdk): isValidTdf input guard, docs and reason API (DSPX-5358)

  #1118·dmihalcik-virtru opened Oct 23, 2026Member·

  ·
  5

• fix(sdk): bump jose from 6.0.8 to 6.2.12 in /lib

  dependenciesjavascript
  #1116·dependabot[bot] opened Oct 22, 2026Bot·

  ·
  1

• chore(docs): bump dpop from 1.4.1 to 2.1.2 in /web-app

  dependenciesjavascript
  #1111·dependabot[bot] opened Oct 22, 2026Bot·

  ·
  5

• chore(docs): bump @vitejs/plugin-react from 5.2.0 to 6.1.2 in /web-app

  dependenciesjavascript
  #1110·dependabot[bot] opened Oct 22, 2026Bot·

  ·
  5

• chore(cli): bump chai from 5.3.3 to 6.3.0 in /cli

  dependenciesjavascript
  #1107·dependabot[bot] opened Oct 22, 2026Bot·

  ·
  4

• chore(cli): bump typescript from 6.0.3 to 7.0.2 in /cli

  dependenciesjavascript
  #1106·dependabot[bot] opened Oct 22, 2026Bot·

  ·
  1

• feat(sdk): read deflate-compressed ZIP entries in TDF archives

  #1099·pflynn-virtru opened Oct 20, 2026Member·

  ·
  4

• feat(sdk): add opt-in hexless policy binding

  #1097·pflynn-virtru opened Oct 19, 2026Member·

  ·
  8

• chore(main): trim AGENTS.md; drop CLAUDE.md symlink

  #1094·dmihalcik-virtru opened Oct 19, 2026Member·

  ·
  3

• docs(spec): DSPX-5162 evaluate Bun and Deno vs Node for the CLI; fix(sdk): Bun slice(-n)

  #1090·dmihalcik-virtru opened Oct 15, 2026Member·

  ·
  3

• fix(sdk): use a distinct IV for each key access object's metadata (DSPX-4492)

  #1085·dmihalcik-virtru opened Oct 14, 2026Member·

  ·
  6

• fix(sdk): fresh KAO metadata IV; require fresh key from encrypt keyMiddleware (DSPX-4492)

  #1078·dmihalcik-virtru opened Oct 9, 2026Member·

  ·
  3

• feat(sdk): add AesGcmEncryptor to CryptoService (DSPX-4496)

  #1063·dmihalcik-virtru opened Oct 6, 2026Member·

  ·
  6

• feat(sdk): keep the KAS's reason on PermissionDeniedError

  #1058·mmaudet opened Oct 1, 2026·

  ·
  1

  3

• fix(sdk): configured assertion keys take precedence over JWS header keys

  #1052·pflynn-virtru opened Sep 30, 2026Member·

  ·
  5

• feat(sdk): wrap keys for hybrid ML-KEM + ECDH KAS keys

  #1049·mmaudet opened Sep 27, 2026·

  ·
  1

• fix(sdk): report a malformed manifest as an invalid file

  #1044·pflynn-virtru opened Sep 18, 2026Member·

  ·
  7

• feat(sdk): add opt-in unprefixed manifest entry name

  #1040·pflynn-virtru opened Sep 15, 2026Member·

  ·
  15

• chore(tests): failing repros for the #1031 review findings (DSPX-4703)

  #1039·pflynn-virtru opened Sep 14, 2026Member·

  ·
  1

• fix(sdk): validate the manifest at the read boundary (DSPX-4703)

  #1034·dmihalcik-virtru opened Sep 11, 2026Member·

  ·
  9