@blamejs/blamejs-shop 0.5.22 → 0.5.24
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +4 -0
- package/README.md +1 -0
- package/SECURITY.md +23 -0
- package/lib/admin.js +292 -20
- package/lib/asset-manifest.json +5 -5
- package/lib/business-hours.js +4 -5
- package/lib/carrier-rates.js +4 -5
- package/lib/compliance-export.js +32 -2
- package/lib/customer-impersonation.js +140 -12
- package/lib/delivery-estimate.js +4 -5
- package/lib/payment.js +5 -3
- package/lib/shipping-labels.js +4 -5
- package/lib/shipping-zones.js +4 -5
- package/lib/storefront.js +583 -1
- package/lib/webhooks.js +5 -3
- package/package.json +1 -1
package/lib/webhooks.js
CHANGED
|
@@ -46,9 +46,11 @@
|
|
|
46
46
|
* backoff retry schedule, and — if the endpoint never negotiates a
|
|
47
47
|
* supported group — lands in `webhook_dlq` after the fifth attempt.
|
|
48
48
|
* This is a deliberate posture choice, NOT a silent classical
|
|
49
|
-
* downgrade: the
|
|
50
|
-
*
|
|
51
|
-
*
|
|
49
|
+
* downgrade: every outbound dial in the shop — this one and the payment
|
|
50
|
+
* processors alike — now runs on the framework's PQC-first default. The
|
|
51
|
+
* processor adapters used to pin a hand-built agent for their two fixed
|
|
52
|
+
* endpoints; that was removed once the framework's offer ended with a
|
|
53
|
+
* classical option, because by then the pin was the downgrade.
|
|
52
54
|
* An operator whose receiver can't meet the PQC list terminates TLS
|
|
53
55
|
* for it on a fronting proxy (Cloudflare, a load balancer) that does,
|
|
54
56
|
* or upgrades the receiver's TLS stack.
|
package/package.json
CHANGED