@fedify/fedify 1.2.21 → 1.2.23

package/CHANGES.md

@@ -3,6 +3,31 @@
 Fedify changelog
 ================
 
+Version 1.2.23
+--------------
+
+Released on June 30, 2025.
+
+ -  Fixed JSON-LD serialization of the `Question.voters` property to correctly
+    serialize as a plain number (e.g., `"votersCount": 123`) instead of as a
+    typed literal object (e.g., `"votersCount":{"type":"xsd:nonNegativeInteger",
+    "@value":123}`).
+
+
+Version 1.2.22
+--------------
+
+Released on May 16, 2025.
+
+ -  Fixed a bug where inbox handler had thrown a `jsonld.SyntaxError` which
+    caused a `500 Internal Server Error` when the received activity had
+    an invalid JSON-LD syntax.  Now it logs the error and responds with
+    a `400 Bad Request` error instead.  [[#232]]
+
+ -  The `exportJwk()` function now populates the `alg` property of a returned
+    `JsonWebKey` object with `"Ed25519"` if the input key is an Ed25519 key.
+
+
 Version 1.2.21
 --------------
 
@@ -391,6 +416,31 @@ Released on October 31, 2024.
 [#118]: https://github.com/dahlia/fedify/issues/118
 
 
+Version 1.1.23
+--------------
+
+Released on June 30, 2025.
+
+ -  Fixed JSON-LD serialization of the `Question.voters` property to correctly
+    serialize as a plain number (e.g., `"votersCount": 123`) instead of as a
+    typed literal object (e.g., `"votersCount":{"type":"xsd:nonNegativeInteger",
+    "@value":123}`).
+
+
+Version 1.1.22
+--------------
+
+Released on May 16, 2025.
+
+ -  Fixed a bug where inbox handler had thrown a `jsonld.SyntaxError` which
+    caused a `500 Internal Server Error` when the received activity had
+    an invalid JSON-LD syntax.  Now it logs the error and responds with
+    a `400 Bad Request` error instead.  [[#232]]
+
+ -  The `exportJwk()` function now populates the `alg` property of a returned
+    `JsonWebKey` object with `"Ed25519"` if the input key is an Ed25519 key.
+
+
 Version 1.1.21
 --------------
 
@@ -820,6 +870,33 @@ Released on October 20, 2024.
 [#150]: https://github.com/dahlia/fedify/issues/150
 
 
+Version 1.0.26
+--------------
+
+Released on June 30, 2025.
+
+ -  Fixed JSON-LD serialization of the `Question.voters` property to correctly
+    serialize as a plain number (e.g., `"votersCount": 123`) instead of as a
+    typed literal object (e.g., `"votersCount":{"type":"xsd:nonNegativeInteger",
+    "@value":123}`).
+
+
+Version 1.0.25
+--------------
+
+Released on May 16, 2025.
+
+ -  Fixed a bug where inbox handler had thrown a `jsonld.SyntaxError` which
+    caused a `500 Internal Server Error` when the received activity had
+    an invalid JSON-LD syntax.  Now it logs the error and responds with
+    a `400 Bad Request` error instead.  [[#232]]
+
+ -  The `exportJwk()` function now populates the `alg` property of a returned
+    `JsonWebKey` object with `"Ed25519"` if the input key is an Ed25519 key.
+
+[#232]: https://github.com/fedify-dev/fedify/issues/232
+
+
 Version 1.0.24
 --------------
 

package/esm/deps/jsr.io/@std/bytes/{1.0.5 → 1.0.6}/equals.js

@@ -48,7 +48,7 @@ function equals32Bit(a, b) {
  * Byte length threshold for when to use 32-bit comparisons, based on
  * benchmarks.
  *
- * @see {@link https://github.com/denoland/deno_std/pull/4635}
+ * @see {@link https://github.com/denoland/std/pull/4635}
  */
 const THRESHOLD_32_BIT = 160;
 /**

package/esm/deps/jsr.io/@std/semver/{1.0.4 → 1.0.5}/_constants.js

@@ -1,14 +1,4 @@
 // Copyright 2018-2025 the Deno authors. MIT license.
-/**
- * The minimum valid SemVer object. Equivalent to `0.0.0`.
- */
-export const MIN = {
-    major: 0,
-    minor: 0,
-    patch: 0,
-    prerelease: [],
-    build: [],
-};
 /**
  * ANY is a sentinel value used by some range calculations. It is not a valid
  * SemVer object and should not be used directly.

package/esm/deps/jsr.io/@std/semver/{1.0.4 → 1.0.5}/satisfies.js

@@ -1,4 +1,5 @@
 // Copyright 2018-2025 the Deno authors. MIT license.
+// This module is browser compatible.
 import { testComparatorSet } from "./_test_comparator_set.js";
 /**
  * Test to see if the SemVer satisfies the range.

package/esm/federation/handler.js

@@ -1,6 +1,6 @@
 import * as dntShim from "../_dnt.shims.js";
 import { getLogger } from "@logtape/logtape";
-import { accepts } from "../deps/jsr.io/@std/http/1.0.13/negotiation.js";
+import { accepts } from "../deps/jsr.io/@std/http/1.0.18/negotiation.js";
 import { verifyRequest } from "../sig/http.js";
 import { detachSignature, verifyJsonLd } from "../sig/ld.js";
 import { doesActorOwnKey } from "../sig/owner.js";
@@ -247,11 +247,24 @@ export async function handleInbox(request, { recipient, context, inboxContextFac
             await kv.set([...kvPrefixes.publicKey, keyId.href], serialized);
         },
     };
-    const ldSigVerified = await verifyJsonLd(json, {
-        contextLoader: context.contextLoader,
-        documentLoader: context.documentLoader,
-        keyCache,
-    });
+    let ldSigVerified;
+    try {
+        ldSigVerified = await verifyJsonLd(json, {
+            contextLoader: context.contextLoader,
+            documentLoader: context.documentLoader,
+            keyCache,
+        });
+    }
+    catch (error) {
+        if (error instanceof Error && error.name === "jsonld.SyntaxError") {
+            logger.error("Failed to parse JSON-LD:\n{error}", { recipient, error });
+            return new Response("Invalid JSON-LD.", {
+                status: 400,
+                headers: { "Content-Type": "text/plain; charset=utf-8" },
+            });
+        }
+        ldSigVerified = false;
+    }
     const jsonWithoutSig = detachSignature(json);
     let activity = null;
     if (ldSigVerified) {

package/esm/nodeinfo/client.js

@@ -1,5 +1,5 @@
 import { getLogger } from "@logtape/logtape";
-import { parse } from "../deps/jsr.io/@std/semver/1.0.4/mod.js";
+import { parse } from "../deps/jsr.io/@std/semver/1.0.5/mod.js";
 const logger = getLogger(["fedify", "nodeinfo", "client"]);
 export async function getNodeInfo(url, options = {}) {
     try {

package/esm/nodeinfo/mod.js

@@ -5,6 +5,6 @@
  * @module
  * @since 0.2.0
  */
-export { format as formatSemVer, parse as parseSemVer, } from "../deps/jsr.io/@std/semver/1.0.4/mod.js";
+export { format as formatSemVer, parse as parseSemVer, } from "../deps/jsr.io/@std/semver/1.0.5/mod.js";
 export { getNodeInfo, parseNodeInfo, } from "./client.js";
 export * from "./types.js";

package/esm/nodeinfo/types.js

@@ -1,4 +1,4 @@
-import { format } from "../deps/jsr.io/@std/semver/1.0.4/mod.js";
+import { format } from "../deps/jsr.io/@std/semver/1.0.5/mod.js";
 /**
  * Converts a {@link NodeInfo} object to a JSON value.
  * @param nodeInfo The {@link NodeInfo} object to convert.

package/esm/runtime/key.js

@@ -1,6 +1,6 @@
 import * as dntShim from "../_dnt.shims.js";
 import { createPublicKey } from "node:crypto";
-import { concat } from "../deps/jsr.io/@std/bytes/1.0.5/concat.js";
+import { concat } from "../deps/jsr.io/@std/bytes/1.0.6/concat.js";
 import { decodeBase64, encodeBase64 } from "../deps/jsr.io/@std/encoding/1.0.7/base64.js";
 import { decodeBase64Url } from "../deps/jsr.io/@std/encoding/1.0.7/base64url.js";
 import { decodeHex } from "../deps/jsr.io/@std/encoding/1.0.7/hex.js";

package/esm/sig/http.js

@@ -1,6 +1,6 @@
 import * as dntShim from "../_dnt.shims.js";
 import { getLogger } from "@logtape/logtape";
-import { equals } from "../deps/jsr.io/@std/bytes/1.0.5/mod.js";
+import { equals } from "../deps/jsr.io/@std/bytes/1.0.6/mod.js";
 import { decodeBase64, encodeBase64 } from "../deps/jsr.io/@std/encoding/1.0.7/base64.js";
 import { CryptographicKey } from "../vocab/vocab.js";
 import { fetchKey, validateCryptoKey } from "./key.js";

package/esm/sig/key.js

@@ -68,7 +68,10 @@ export function generateCryptoKeyPair(algorithm) {
  */
 export async function exportJwk(key) {
     validateCryptoKey(key);
-    return await dntShim.crypto.subtle.exportKey("jwk", key);
+    const jwk = await dntShim.crypto.subtle.exportKey("jwk", key);
+    if (jwk.crv === "Ed25519")
+        jwk.alg = "Ed25519";
+    return jwk;
 }
 /**
  * Imports a key from JWK format.

package/esm/vocab/announce.yaml

@@ -16,7 +16,9 @@ defaultContext:
   misskey: "https://misskey-hub.net/ns#"
   fedibird: "http://fedibird.com/ns#"
   sensitive: "as:sensitive"
-  votersCount: "toot:votersCount"
+  votersCount:
+    "@id": "toot:votersCount"
+    "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger"
   Emoji: "toot:Emoji"
   Hashtag: "as:Hashtag"
   quoteUrl: "as:quoteUrl"

package/esm/vocab/create.yaml

@@ -13,7 +13,9 @@ defaultContext:
   misskey: "https://misskey-hub.net/ns#"
   fedibird: "http://fedibird.com/ns#"
   sensitive: "as:sensitive"
-  votersCount: "toot:votersCount"
+  votersCount:
+    "@id": "toot:votersCount"
+    "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger"
   Emoji: "toot:Emoji"
   Hashtag: "as:Hashtag"
   ChatMessage: "http://litepub.social/ns#ChatMessage"

package/esm/vocab/delete.yaml

@@ -15,7 +15,9 @@ defaultContext:
   misskey: "https://misskey-hub.net/ns#"
   fedibird: "http://fedibird.com/ns#"
   sensitive: "as:sensitive"
-  votersCount: "toot:votersCount"
+  votersCount:
+    "@id": "toot:votersCount"
+    "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger"
   Emoji: "toot:Emoji"
   Hashtag: "as:Hashtag"
   ChatMessage: "http://litepub.social/ns#ChatMessage"

package/esm/vocab/lookup.js

@@ -1,6 +1,6 @@
 import * as dntShim from "../_dnt.shims.js";
 import { getLogger } from "@logtape/logtape";
-import { delay } from "../deps/jsr.io/@std/async/1.0.12/delay.js";
+import { delay } from "../deps/jsr.io/@std/async/1.0.13/delay.js";
 import { fetchDocumentLoader, } from "../runtime/docloader.js";
 import { lookupWebFinger } from "../webfinger/lookup.js";
 import { Object } from "./vocab.js";

package/esm/vocab/question.yaml

@@ -14,85 +14,87 @@ description: |
   used to express possible answers, but a Question object *must not* have both
   properties.
 defaultContext:
-- "https://w3id.org/identity/v1"
-- "https://www.w3.org/ns/activitystreams"
-- "https://w3id.org/security/data-integrity/v1"
-- toot: "http://joinmastodon.org/ns#"
-  misskey: "https://misskey-hub.net/ns#"
-  fedibird: "http://fedibird.com/ns#"
-  sensitive: "as:sensitive"
-  votersCount: "toot:votersCount"
-  Emoji: "toot:Emoji"
-  Hashtag: "as:Hashtag"
-  quoteUrl: "as:quoteUrl"
-  _misskey_quote: "misskey:_misskey_quote"
-  quoteUri: "fedibird:quoteUri"
+  - "https://w3id.org/identity/v1"
+  - "https://www.w3.org/ns/activitystreams"
+  - "https://w3id.org/security/data-integrity/v1"
+  - toot: "http://joinmastodon.org/ns#"
+    misskey: "https://misskey-hub.net/ns#"
+    fedibird: "http://fedibird.com/ns#"
+    sensitive: "as:sensitive"
+    votersCount:
+      "@id": "toot:votersCount"
+      "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger"
+    Emoji: "toot:Emoji"
+    Hashtag: "as:Hashtag"
+    quoteUrl: "as:quoteUrl"
+    _misskey_quote: "misskey:_misskey_quote"
+    quoteUri: "fedibird:quoteUri"
 
 properties:
-- pluralName: exclusiveOptions
-  singularName: exclusiveOption
-  singularAccessor: false
-  compactName: oneOf
-  uri: "https://www.w3.org/ns/activitystreams#oneOf"
-  description: |
-    Identifies an exclusive option for a Question.  Use of `exclusiveOptions`
-    implies that the Question can have only a single answer.  To indicate that
-    a Question can have multiple answers, use `inclusiveOptions`.
-  range:
-  - "https://www.w3.org/ns/activitystreams#Object"
+  - pluralName: exclusiveOptions
+    singularName: exclusiveOption
+    singularAccessor: false
+    compactName: oneOf
+    uri: "https://www.w3.org/ns/activitystreams#oneOf"
+    description: |
+      Identifies an exclusive option for a Question.  Use of `exclusiveOptions`
+      implies that the Question can have only a single answer.  To indicate that
+      a Question can have multiple answers, use `inclusiveOptions`.
+    range:
+      - "https://www.w3.org/ns/activitystreams#Object"
 
-- pluralName: inclusiveOptions
-  singularName: inclusiveOption
-  singularAccessor: false
-  compactName: anyOf
-  uri: "https://www.w3.org/ns/activitystreams#anyOf"
-  description: |
-    Identifies an inclusive option for a Question.  Use of `inclusiveOptions`
-    implies that the Question can have multiple answers.  To indicate that
-    a Question can have only one answer, use `exclusiveOptions`.
-  range:
-  - "https://www.w3.org/ns/activitystreams#Object"
+  - pluralName: inclusiveOptions
+    singularName: inclusiveOption
+    singularAccessor: false
+    compactName: anyOf
+    uri: "https://www.w3.org/ns/activitystreams#anyOf"
+    description: |
+      Identifies an inclusive option for a Question.  Use of `inclusiveOptions`
+      implies that the Question can have multiple answers.  To indicate that
+      a Question can have only one answer, use `exclusiveOptions`.
+    range:
+      - "https://www.w3.org/ns/activitystreams#Object"
 
-- singularName: closed
-  functional: true
-  compactName: closed
-  uri: "https://www.w3.org/ns/activitystreams#closed"
-  description: |
-    Indicates that a question has been closed, and answers are no longer
-    accepted.
-  range:
-  - "http://www.w3.org/2001/XMLSchema#dateTime"
-  - "http://www.w3.org/2001/XMLSchema#boolean"
+  - singularName: closed
+    functional: true
+    compactName: closed
+    uri: "https://www.w3.org/ns/activitystreams#closed"
+    description: |
+      Indicates that a question has been closed, and answers are no longer
+      accepted.
+    range:
+      - "http://www.w3.org/2001/XMLSchema#dateTime"
+      - "http://www.w3.org/2001/XMLSchema#boolean"
 
-- singularName: voters
-  functional: true
-  compactName: votersCount
-  uri: "http://joinmastodon.org/ns#votersCount"
-  description: |
-    How many people have voted in the poll.  Distinct from how many votes have
-    been cast (in the case of multiple-choice polls).
-  range:
-  - "http://www.w3.org/2001/XMLSchema#nonNegativeInteger"
+  - singularName: voters
+    functional: true
+    compactName: votersCount
+    uri: "http://joinmastodon.org/ns#votersCount"
+    description: |
+      How many people have voted in the poll.  Distinct from how many votes have
+      been cast (in the case of multiple-choice polls).
+    range:
+      - "http://www.w3.org/2001/XMLSchema#nonNegativeInteger"
 
-- singularName: quoteUrl
-  functional: true
-  compactName: quoteUrl
-  uri: "https://www.w3.org/ns/activitystreams#quoteUrl"
-  redundantProperties:
-  - compactName: _misskey_quote
-    uri: "https://misskey-hub.net/ns#_misskey_quote"
-  - compactName: quoteUri
-    uri: "http://fedibird.com/ns#quoteUri"
-  description: |
-    The URI of the ActivityStreams object that this object quotes.
+  - singularName: quoteUrl
+    functional: true
+    compactName: quoteUrl
+    uri: "https://www.w3.org/ns/activitystreams#quoteUrl"
+    redundantProperties:
+      - compactName: _misskey_quote
+        uri: "https://misskey-hub.net/ns#_misskey_quote"
+      - compactName: quoteUri
+        uri: "http://fedibird.com/ns#quoteUri"
+    description: |
+      The URI of the ActivityStreams object that this object quotes.
 
-    This property sets three JSON-LD properties at once under the hood:
+      This property sets three JSON-LD properties at once under the hood:
 
-    1. https://www.w3.org/ns/activitystreams#quoteUrl
-    2. https://misskey-hub.net/ns#_misskey_quote
-    3. http://fedibird.com/ns#quoteUri
+      1. https://www.w3.org/ns/activitystreams#quoteUrl
+      2. https://misskey-hub.net/ns#_misskey_quote
+      3. http://fedibird.com/ns#quoteUri
 
-    When a JSON-LD object is parsed, this property is filled with one of
-    the values of those three properties in order.
-  range:
-  - "fedify:url"
+      When a JSON-LD object is parsed, this property is filled with one of
+      the values of those three properties in order.
+    range:
+      - "fedify:url"

package/esm/vocab/update.yaml

@@ -37,7 +37,9 @@ defaultContext:
   suspended: "toot:suspended"
   memorial: "toot:memorial"
   indexable: "toot:indexable"
-  votersCount: "toot:votersCount"
+  votersCount:
+    "@id": "toot:votersCount"
+    "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger"
   Emoji: "toot:Emoji"
   Hashtag: "as:Hashtag"
   schema: "http://schema.org#"