@learncard/create-http-bridge 1.1.258 → 1.1.259

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @learncard/create-http-bridge
 
+## 1.1.259
+
+### Patch Changes
+
+- [#1678](https://github.com/learningeconomy/LearnCard/pull/1678) [`cdd67a28de3ebbd11176711847a3eb0f14bd678d`](https://github.com/learningeconomy/LearnCard/commit/cdd67a28de3ebbd11176711847a3eb0f14bd678d) Thanks [@Custard7](https://github.com/Custard7)! - Upgrade `simple-git` to 4.0.2 to resolve GHSA-x6jw-m9v5-85vh (CVE-2026-102828), where the unsafe-operation guard did not block git trailer command configuration. The scaffold clone behaves the same; the CLI now uses the named `simpleGit` export because v4 removed the default export.
+
+- [#1645](https://github.com/learningeconomy/LearnCard/pull/1645) [`590adf48867d6c6fd504e66a11c9827d5102122d`](https://github.com/learningeconomy/LearnCard/commit/590adf48867d6c6fd504e66a11c9827d5102122d) Thanks [@github-actions](https://github.com/apps/github-actions)! - Update DIDKit WASM from didkit 543de99bb356 and ssi 6d71e5f46e59, including the HTTP bridge artifact and integrity pin.
+
+- Updated dependencies [[`6209da80c52ac056a7644dab14669192740c9dad`](https://github.com/learningeconomy/LearnCard/commit/6209da80c52ac056a7644dab14669192740c9dad), [`5890451789b18afee45dc5ecbab3fa30aa90f085`](https://github.com/learningeconomy/LearnCard/commit/5890451789b18afee45dc5ecbab3fa30aa90f085), [`1387cd0a08fa6b0a706c86a5a0376b6c7d706856`](https://github.com/learningeconomy/LearnCard/commit/1387cd0a08fa6b0a706c86a5a0376b6c7d706856), [`d7ca528898d988c65f0dc7084cfdcd41767648c5`](https://github.com/learningeconomy/LearnCard/commit/d7ca528898d988c65f0dc7084cfdcd41767648c5), [`8f3bc66ab3d3e5e1edb3fbf5f362025875a914ba`](https://github.com/learningeconomy/LearnCard/commit/8f3bc66ab3d3e5e1edb3fbf5f362025875a914ba), [`1387cd0a08fa6b0a706c86a5a0376b6c7d706856`](https://github.com/learningeconomy/LearnCard/commit/1387cd0a08fa6b0a706c86a5a0376b6c7d706856), [`267cf40291b3a63caf178857be0e57feaf5e0948`](https://github.com/learningeconomy/LearnCard/commit/267cf40291b3a63caf178857be0e57feaf5e0948), [`c78c982f9f4911f1ca2973380f19d80db775e012`](https://github.com/learningeconomy/LearnCard/commit/c78c982f9f4911f1ca2973380f19d80db775e012)]:
+    - @learncard/types@5.23.0
+    - @learncard/init@2.5.2
+
 ## 1.1.258
 
 ### Patch Changes

package/cli/Cloning.tsx

@@ -1,6 +1,6 @@
 import React, { useEffect } from 'react';
 import { Text, Box, useApp } from 'ink';
-import simpleGit from 'simple-git';
+import { simpleGit } from 'simple-git';
 import Gradient from 'ink-gradient';
 import Spinner from 'ink-spinner';
 

package/cli/Info.tsx

@@ -53,7 +53,7 @@ const Info: React.FC<InfoProps> = ({ path }) => {
                 {!bun && (
                     <Text>
                         <Text color="green">{'$ '}</Text>
-                        <SyntaxHighlight code="npm i -g bun@1.3.14" language="bash" />
+                        <SyntaxHighlight code="npm i -g bun@1.4.2" language="bash" />
                     </Text>
                 )}
                 <Text>

package/dist/index.js

@@ -28,7 +28,6 @@ var figlet__default = /*#__PURE__*/_interopDefaultLegacy(figlet);
 var produce__default = /*#__PURE__*/_interopDefaultLegacy(produce);
 var TextInput__default = /*#__PURE__*/_interopDefaultLegacy(TextInput);
 var crypto__default = /*#__PURE__*/_interopDefaultLegacy(crypto);
-var simpleGit__default = /*#__PURE__*/_interopDefaultLegacy(simpleGit);
 var Spinner__default = /*#__PURE__*/_interopDefaultLegacy(Spinner);
 var SyntaxHighlight__default = /*#__PURE__*/_interopDefaultLegacy(SyntaxHighlight);
 
@@ -314,7 +313,7 @@ const Form = ({ state, setState, onSubmit, onCancel }) => {
   );
 };
 
-const git = simpleGit__default["default"]();
+const git = simpleGit.simpleGit();
 const Cloning = ({ path, onFinished }) => {
   const app = ink.useApp();
   React.useEffect(() => {
@@ -364,7 +363,7 @@ const Info = ({ path }) => {
     /* @__PURE__ */ React__default["default"].createElement(ink.Text, null, "Success!"),
     /* @__PURE__ */ React__default["default"].createElement(ink.Text, null, "Your new Learn Card HTTP Bridge is ready to deploy!"),
     aws ? /* @__PURE__ */ React__default["default"].createElement(ink.Text, null, "To deploy, run the following commands:") : /* @__PURE__ */ React__default["default"].createElement(React__default["default"].Fragment, null, /* @__PURE__ */ React__default["default"].createElement(ink.Text, null, "It looks like you might not have serverless/AWS set up yet!"), /* @__PURE__ */ React__default["default"].createElement(ink.Text, null, "Please review the instructions at https://www.serverless.com/framework/docs/tutorial if you have any issues deploying the Learn Card HTTP Bridge!"), /* @__PURE__ */ React__default["default"].createElement(ink.Text, null, "After you're all set up, run the following commands to deploy the Learn Card HTTP Bridge!")),
-    /* @__PURE__ */ React__default["default"].createElement(ink.Box, { borderStyle: "round", flexDirection: "column" }, !bun && /* @__PURE__ */ React__default["default"].createElement(ink.Text, null, /* @__PURE__ */ React__default["default"].createElement(ink.Text, { color: "green" }, "$ "), /* @__PURE__ */ React__default["default"].createElement(SyntaxHighlight__default["default"], { code: "npm i -g bun@1.3.14", language: "bash" })), /* @__PURE__ */ React__default["default"].createElement(ink.Text, null, /* @__PURE__ */ React__default["default"].createElement(ink.Text, { color: "green" }, "$ "), /* @__PURE__ */ React__default["default"].createElement(
+    /* @__PURE__ */ React__default["default"].createElement(ink.Box, { borderStyle: "round", flexDirection: "column" }, !bun && /* @__PURE__ */ React__default["default"].createElement(ink.Text, null, /* @__PURE__ */ React__default["default"].createElement(ink.Text, { color: "green" }, "$ "), /* @__PURE__ */ React__default["default"].createElement(SyntaxHighlight__default["default"], { code: "npm i -g bun@1.4.2", language: "bash" })), /* @__PURE__ */ React__default["default"].createElement(ink.Text, null, /* @__PURE__ */ React__default["default"].createElement(ink.Text, { color: "green" }, "$ "), /* @__PURE__ */ React__default["default"].createElement(
       SyntaxHighlight__default["default"],
       {
         code: `cd ${path}/packages/learn-card-bridge-http`,
@@ -416,7 +415,7 @@ const App = ({ name = "LearnCardHTTPBridge" }) => {
 };
 
 var name = "@learncard/create-http-bridge";
-var version = "1.1.258";
+var version = "1.1.259";
 var description = "Instantly create and deploy a Learn Card Bridge HTTP API via AWS Lambda!";
 var main = "dist/index.js";
 var bin = "dist/index.js";
@@ -453,7 +452,7 @@ var dependencies = {
 	"serverless-esbuild": "^1.25.0",
 	"serverless-http": "^3.0.1",
 	"serverless-plugin-warmup": "^8.1.0",
-	"simple-git": "^3.36.0",
+	"simple-git": "^4.0.2",
 	"use-immer": "^0.7.0",
 	zod: "4.1.13"
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@learncard/create-http-bridge",
-    "version": "1.1.258",
+    "version": "1.1.259",
     "description": "Instantly create and deploy a Learn Card Bridge HTTP API via AWS Lambda!",
     "main": "dist/index.js",
     "bin": "dist/index.js",
@@ -14,8 +14,8 @@
     "author": "Learning Economy Foundation (www.learningeconomy.io)",
     "license": "MIT",
     "dependencies": {
-        "@learncard/init": "2.5.1",
-        "@learncard/types": "5.22.0",
+        "@learncard/init": "2.5.2",
+        "@learncard/types": "5.23.0",
         "@rollup/plugin-json": "^4.1.0",
         "commander": "^9.3.0",
         "cors": "^2.8.5",
@@ -37,7 +37,7 @@
         "serverless-esbuild": "^1.25.0",
         "serverless-http": "^3.0.1",
         "serverless-plugin-warmup": "^8.1.0",
-        "simple-git": "^3.36.0",
+        "simple-git": "^4.0.2",
         "use-immer": "^0.7.0",
         "zod": "4.1.13"
     },

package/scripts/sync-didkit.ts

@@ -1,7 +1,7 @@
 import { createHash } from 'crypto';
 import { readFile, writeFile } from 'fs/promises';
 
-const EXPECTED_DIDKIT_SHA256 = 'a817bfa1dacc5b1f426caed9b1ebb9a5b5f80176dc1e061da634755ceb456653';
+const EXPECTED_DIDKIT_SHA256 = 'fe1d254186130480a3ae831fe1b17c58ea732adc39cad16f895aa58e03f1bd62';
 const sourceUrl = new URL(
     '../../plugins/didkit/src/didkit/pkg/didkit_wasm_bg.wasm',
     import.meta.url