@mojaloop/central-ledger 20.1.1 → 20.3.0

package/.nvmrc

@@ -1 +1 @@
-24.18.0
+24.21.0

package/.well-known/security.txt

@@ -0,0 +1,14 @@
+#Mojaloop's security address
+Contact: mailto:security@mojaloop.io
+
+#Mojaloop's CVD Policy
+Policy: https://docs.mojaloop.io/community/contributing/cvd.html
+
+#This file must be treated as stale/invalid after this date (RFC 9116 mandatory field)
+Expires: 2027-09-18T00:00:00.000Z
+
+#Canonical location of this file, so a copy hosted elsewhere is not trusted
+Canonical: https://raw.githubusercontent.com/mojaloop/central-ledger/main/.well-known/security.txt
+
+#Language(s) the security team can be contacted in
+Preferred-Languages: en

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [20.3.0](https://github.com/mojaloop/central-ledger/compare/v20.2.0...v20.3.0) (2026-10-01)
+
+
+### Features
+
+* upgrade streaming lib version to add more metrics ([#1307](https://github.com/mojaloop/central-ledger/issues/1307)) ([c13f8ce](https://github.com/mojaloop/central-ledger/commit/c13f8cebfd91f4312a32182df5c915d3ebfee277))
+
+
+### Chore
+
+* **sbom:** update sbom [skip ci] ([9aa0385](https://github.com/mojaloop/central-ledger/commit/9aa0385feadde5febf8e816b2fe7b23076d2c7e5))
+
+## [20.2.0](https://github.com/mojaloop/central-ledger/compare/v20.1.1...v20.2.0) (2026-09-17)
+
+
+### Features
+
+* adding security.txt file, accompanying changes to address pre-commit hook failures ([#1304](https://github.com/mojaloop/central-ledger/issues/1304)) ([2f2831c](https://github.com/mojaloop/central-ledger/commit/2f2831c8c6912b3fa2003de745b5062bc6ee881b))
+
+
+### Chore
+
+* **sbom:** update sbom [skip ci] ([1625f4a](https://github.com/mojaloop/central-ledger/commit/1625f4a2d4ef8fb96a09c2f6ed77657e3230814b))
+
 ### [20.1.1](https://github.com/mojaloop/central-ledger/compare/v20.1.0...v20.1.1) (2026-09-17)
 
 

package/Dockerfile

@@ -1,5 +1,5 @@
 # Arguments
-ARG NODE_VERSION=24.18.0-alpine3.24
+ARG NODE_VERSION=lts-alpine
 
 # NOTE: Ensure you set NODE_VERSION Build Argument as follows...
 #

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/central-ledger",
-  "version": "20.1.1",
+  "version": "20.3.0",
   "description": "Central ledger hosted by a scheme to record and settle transfers",
   "license": "Apache-2.0",
   "author": "ModusBox",
@@ -32,7 +32,8 @@
     "lint",
     "test:unit",
     "dep:check",
-    "audit:check"
+    "audit:check",
+    "license:check"
   ],
   "scripts": {
     "build": "tsc",
@@ -81,6 +82,7 @@
     "audit:check": "npx audit-ci --config ./audit-ci.jsonc",
     "dep:check": "npx ncu -e 2",
     "dep:update": "npx ncu -u",
+    "license:check": "npx @mojaloop/license-scanner-tool .",
     "release": "npx standard-version --no-verify --releaseCommitMessageFormat 'chore(release): {{currentTag}} [skip ci]'",
     "snapshot": "npx standard-version --no-verify --skip.changelog --prerelease snapshot --releaseCommitMessageFormat 'chore(snapshot): {{currentTag}}'",
     "wait-4-docker": "node ./scripts/_wait4_all.js"
@@ -98,12 +100,12 @@
     "@mojaloop/central-services-logger": "11.10.6",
     "@mojaloop/central-services-metrics": "12.8.8",
     "@mojaloop/central-services-shared": "18.39.3",
-    "@mojaloop/central-services-stream": "11.10.0",
+    "@mojaloop/central-services-stream": "11.11.0",
     "@mojaloop/database-lib": "11.3.10",
-    "@mojaloop/event-sdk": "14.8.5",
+    "@mojaloop/event-sdk": "14.8.6",
     "@mojaloop/inter-scheme-proxy-cache-lib": "2.10.0",
     "@mojaloop/ml-number": "11.4.5",
-    "@mojaloop/object-store-lib": "12.2.4",
+    "@mojaloop/object-store-lib": "12.2.5",
     "@now-ims/hapi-now-auth": "2.1.0",
     "@types/bun": "^1.4.2",
     "ajv": "8.20.0",
@@ -131,18 +133,18 @@
   "optionalDependencies": {
     "ed25519": "^0.0.5",
     "mysql": "2.18.1",
-    "mysql2": "3.24.4"
+    "mysql2": "3.24.5"
   },
   "devDependencies": {
-    "@hapi/joi": "17.1.1",
+    "@mojaloop/license-scanner-tool": "1.1.2",
     "@mojaloop/sdk-standard-components": "19.19.1",
     "@opentelemetry/api": "1.9.1",
     "@opentelemetry/auto-instrumentations-node": "0.80.0",
     "@types/mock-knex": "0.4.8",
-    "@types/node": "26.6.0",
+    "@types/node": "26.6.3",
     "@types/rc": "1.2.4",
-    "@typescript-eslint/eslint-plugin": "^8.70.0",
-    "@typescript-eslint/parser": "^8.70.0",
+    "@typescript-eslint/eslint-plugin": "^8.71.0",
+    "@typescript-eslint/parser": "^8.71.0",
     "async-retry": "1.3.3",
     "audit-ci": "^7.1.0",
     "get-port": "7.2.0",
@@ -168,24 +170,30 @@
   "overrides": {
     "@hapi/wreck": "18.1.2",
     "@now-ims/hapi-now-auth": {
-      "joi": "17.13.4"
+      "joi": "17.13.8"
     },
     "blipp": {
-      "joi": "17.13.4"
+      "joi": "17.13.8"
     },
     "jws": "4.0.1",
     "jsdoc": {
-      "markdown-it": "14.2.0"
+      "markdown-it": "14.3.2"
     },
     "linkify-it": "5.0.2",
     "protobufjs": "8.6.6",
     "handlebars": "4.7.9",
     "ajv": "8.20.0",
     "eslint": {
-      "ajv": "6.14.0"
+      "ajv": "6.14.0",
+      "@eslint/eslintrc": {
+        "ajv": "6.14.0"
+      }
     },
     "eslint@9.39.2": {
-      "ajv": "6.14.0"
+      "ajv": "6.14.0",
+      "@eslint/eslintrc": {
+        "ajv": "6.14.0"
+      }
     },
     "rewire": {
       "eslint": {
@@ -195,7 +203,7 @@
         }
       }
     },
-    "axios": "1.18.1",
+    "axios": "1.20.0",
     "brace-expansion": "2.1.7",
     "convict": "6.2.5",
     "form-data": "4.0.6",
@@ -240,8 +248,8 @@
     "postcss": "8.5.28",
     "qs": "6.16.0",
     "js-yaml@^4.0.0": "4.3.2",
-    "@grpc/grpc-js": "1.14.4",
-    "joi@^17.0.0": "17.13.4",
+    "@grpc/grpc-js": "1.14.5",
+    "joi@^17.0.0": "17.13.8",
     "uuid": "11.1.1",
     "@mojaloop/central-services-shared": {
       ".": "$@mojaloop/central-services-shared",