@mojaloop/sdk-scheme-adapter 24.9.8-snapshot.9 → 24.10.0-snapshot.0

package/.circleci/config.yml

@@ -1,7 +1,7 @@
 version: 2.1
 setup: true
 orbs:
-  build: mojaloop/build@1.0.55
+  build: mojaloop/build@1.0.67
 workflows:
   setup:
     jobs:

package/.grype.yaml

@@ -0,0 +1,15 @@
+ignore:
+  - vulnerability: CVE-2025-3277 #  sqlite-libs 3.48.0-r2 
+  - vulnerability: CVE-2024-9410 # ada-libs 2.9.2-r1
+  
+
+# Set output format defaults
+output:
+  - "table"
+  - "json"
+
+# Modify your CircleCI job to check critical count
+search:
+  scope: "squashed"
+quiet: false
+check-for-app-update: false

package/.nvmrc

@@ -1 +1 @@
-18.20.4
+22.15.1

package/CHANGELOG.md

@@ -1,4 +1,11 @@
 # Changelog: [mojaloop/sdk-scheme-adapter](https://github.com/mojaloop/sdk-scheme-adapter)
+## [24.10.0](https://github.com/mojaloop/sdk-scheme-adapter/compare/v24.9.7...v24.10.0) (2025-06-05)
+
+
+### Features
+
+* bump up the node version to v22.15.1 ([#586](https://github.com/mojaloop/sdk-scheme-adapter/issues/586)) ([2c09d28](https://github.com/mojaloop/sdk-scheme-adapter/commit/2c09d28363d065c826899b5613c148dc8d0dd0b4))
+
 ### [24.9.7](https://github.com/mojaloop/sdk-scheme-adapter/compare/v24.9.6...v24.9.7) (2025-06-02)
 
 

package/audit-ci.jsonc

@@ -4,7 +4,5 @@
     // Only use one of ["low": true, "moderate": true, "high": true, "critical": true]
     "moderate": true,
     "allowlist": [
-        "GHSA-968p-4wvh-cqc8", // https://github.com/advisories/GHSA-968p-4wvh-cqc8
-        "GHSA-jr5f-v2jv-69x6" // https://github.com/advisories/GHSA-jr5f-v2jv-69x6
     ]
 }

package/modules/api-svc/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/sdk-scheme-adapter-api-svc",
-  "version": "21.0.0-snapshot.47",
+  "version": "21.0.0-snapshot.50",
   "description": "An adapter for connecting to Mojaloop API enabled switches.",
   "main": "src/index.js",
   "types": "src/index.d.ts",
@@ -86,7 +86,6 @@
     "javascript-state-machine": "3.1.0",
     "js-yaml": "4.1.0",
     "json-schema-ref-parser": "9.0.9",
-    "knex": "3.1.0",
     "koa": "3.0.0",
     "koa-body": "6.0.1",
     "lodash": "4.17.21",
@@ -96,7 +95,7 @@
     "prom-client": "15.1.3",
     "promise-timeout": "1.3.0",
     "random-word-slugs": "0.1.7",
-    "redis": "5.5.5",
+    "redis": "5.5.6",
     "uuidv4": "6.2.13",
     "ws": "8.18.2"
   },
@@ -110,7 +109,7 @@
     "eslint": "9.15.0",
     "eslint-config-airbnb-base": "15.0.0",
     "eslint-plugin-import": "2.31.0",
-    "eslint-plugin-jest": "28.12.0",
+    "eslint-plugin-jest": "28.13.0",
     "jest": "29.7.0",
     "jest-junit": "16.0.0",
     "npm-check-updates": "16.7.10",

package/modules/api-svc/src/index.js

@@ -142,8 +142,6 @@ class Server extends EventEmitter {
     _shouldUpdateInboundServer(newConf) {
         const isInboundDifferent = !_.isEqual(this.conf.inbound, newConf.inbound);
         const isOutboundDifferent = !_.isEqual(this.conf.outbound, newConf.outbound);
-        const isPeerJWSKeysDifferent = !_.isEqual(this.conf.peerJWSKeys, newConf.peerJWSKeys);
-        const isJwsSigningKeyDifferent = !_.isEqual(this.conf.jwsSigningKey, newConf.jwsSigningKey);
 
         if (isInboundDifferent) {
             this.logger.debug('Inbound config is different', {
@@ -158,26 +156,11 @@ class Server extends EventEmitter {
             });
         }
 
-        if (isPeerJWSKeysDifferent) {
-            this.logger.debug('Peer JWS Keys config is different', {
-                oldPeerJWSKeys: this.conf.peerJWSKeys,
-                newPeerJWSKeys: newConf.peerJWSKeys
-            });
-        }
-
-        if (isJwsSigningKeyDifferent) {
-            this.logger.debug('JWS Signing Key config is different', {
-                oldJwsSigningKey: this.conf.jwsSigningKey,
-                newJwsSigningKey: newConf.jwsSigningKey
-            });
-        }
-
-        return isInboundDifferent || isOutboundDifferent || isPeerJWSKeysDifferent || isJwsSigningKeyDifferent;
+        return isInboundDifferent || isOutboundDifferent;
     }
 
     _shouldUpdateOutboundServer(newConf) {
         const isOutboundDifferent = !_.isEqual(this.conf.outbound, newConf.outbound);
-        const isJwsSigningKeyDifferent = !_.isEqual(this.conf.jwsSigningKey, newConf.jwsSigningKey);
 
         if (isOutboundDifferent) {
             this.logger.debug('Outbound config is different', {
@@ -186,14 +169,29 @@ class Server extends EventEmitter {
             });
         }
 
+        return isOutboundDifferent;
+    }
+
+    _shouldUpdatePeerJWSKeys(newConf) {
+        const isPeerJWSKeysDifferent = !_.isEqual(this.conf.peerJWSKeys, newConf.peerJWSKeys);
+        if (isPeerJWSKeysDifferent) {
+            this.logger.debug('Peer JWS Keys config is different', {
+                oldPeerJWSKeys: this.conf.peerJWSKeys,
+                newPeerJWSKeys: newConf.peerJWSKeys
+            });
+        }
+        return isPeerJWSKeysDifferent;
+    }
+
+    _shouldUpdateJwsSigningKey(newConf) {
+        const isJwsSigningKeyDifferent = !_.isEqual(this.conf.jwsSigningKey, newConf.jwsSigningKey);
         if (isJwsSigningKeyDifferent) {
             this.logger.debug('JWS Signing Key config is different', {
                 oldJwsSigningKey: this.conf.jwsSigningKey,
                 newJwsSigningKey: newConf.jwsSigningKey
             });
         }
-
-        return isOutboundDifferent || isJwsSigningKeyDifferent;
+        return isJwsSigningKeyDifferent;
     }
 
     async start() {
@@ -283,9 +281,6 @@ class Server extends EventEmitter {
         this.logger.isDebugEnabled && this.logger.push({ oldConf: this.conf.inbound, newConf: newConf.inbound }).debug('Inbound server configuration');
         const updateInboundServer = this._shouldUpdateInboundServer(newConf);
         if (updateInboundServer) {
-            const stopStartLabel = 'InboundServer stop/start duration';
-            // eslint-disable-next-line no-console
-            console.time(stopStartLabel);
             await this.inboundServer.stop();
             this.inboundServer = new InboundServer(
                 newConf,
@@ -299,17 +294,12 @@ class Server extends EventEmitter {
                 this.emit('error', errMessage);
             });
             await this.inboundServer.start();
-            // eslint-disable-next-line no-console
-            console.timeEnd(stopStartLabel);
             restartActionsTaken.updateInboundServer = true;
         }
 
         this.logger.isDebugEnabled && this.logger.push({ oldConf: this.conf.outbound, newConf: newConf.outbound }).debug('Outbound server configuration');
         const updateOutboundServer = this._shouldUpdateOutboundServer(newConf);
         if (updateOutboundServer) {
-            const stopStartLabel = 'OutboundServer stop/start duration';
-            // eslint-disable-next-line no-console
-            console.time(stopStartLabel);
             await this.outboundServer.stop();
             this.outboundServer = new OutboundServer(
                 newConf,
@@ -324,11 +314,22 @@ class Server extends EventEmitter {
                 this.emit('error', errMessage);
             });
             await this.outboundServer.start();
-            // eslint-disable-next-line no-console
-            console.timeEnd(stopStartLabel);
             restartActionsTaken.updateOutboundServer = true;
         }
 
+        const updatePeerJWSKeys = this._shouldUpdatePeerJWSKeys(newConf);
+        if (updatePeerJWSKeys) {
+            Object.keys(this.conf.peerJWSKeys).forEach(key => { delete this.conf.peerJWSKeys[key]; });
+            Object.assign(this.conf.peerJWSKeys, _.cloneDeep(newConf.peerJWSKeys));
+            restartActionsTaken.updatePeerJWSKeys = true;
+        }
+
+        const updateJwsSigningKey = this._shouldUpdateJwsSigningKey(newConf);
+        if (updateJwsSigningKey) {
+            this.conf.jwsSigningKey = newConf.jwsSigningKey;
+            restartActionsTaken.updateJwsSigningKey = true;
+        }
+
         const updateFspiopEventHandler = !_.isEqual(this.conf.outbound, newConf.outbound)
             && this.conf.fspiopEventHandler.enabled;
         if (updateFspiopEventHandler) {
@@ -420,8 +421,6 @@ class Server extends EventEmitter {
         }
 
         this.conf = newConf;
-        this.conf.peerJWSKeys = newConf?.peerJWSKeys;
-        this.conf.jwsSigningKey = newConf?.jwsSigningKey;
 
         await oldCache?.disconnect();
 

package/modules/api-svc/test/unit/index.test.js

@@ -123,5 +123,37 @@ describe('Server', () => {
             await new Promise((wait) => setTimeout(wait, 1000));
             expect(server.restart).toHaveBeenCalledWith(newConfOutbound);
         });
+
+        it('restarts when peerJWSKeys is different', async () => {
+            const newConfPeerJWSKeys = JSON.parse(JSON.stringify(conf));
+            newConfPeerJWSKeys.peerJWSKeys = { ...conf.peerJWSKeys, newKey: 'newValue' };
+
+            expect(server._shouldUpdatePeerJWSKeys(newConfPeerJWSKeys)).toBe(true);
+
+            controlServer.broadcastConfigChange(newConfPeerJWSKeys);
+            await new Promise((wait) => setTimeout(wait, 1000));
+            expect(server.restart).toHaveBeenCalledWith(newConfPeerJWSKeys);
+        });
+
+        it('does not update when peerJWSKeys is the same', async () => {
+            const newConfPeerJWSKeys = JSON.parse(JSON.stringify(conf));
+            expect(server._shouldUpdatePeerJWSKeys(newConfPeerJWSKeys)).toBe(false);
+        });
+
+        it('restarts when jwsSigningKey is different', async () => {
+            const newConfJwsSigningKey = JSON.parse(JSON.stringify(conf));
+            newConfJwsSigningKey.jwsSigningKey = { ...conf.jwsSigningKey, key: 'differentKey' };
+
+            expect(server._shouldUpdateJwsSigningKey(newConfJwsSigningKey)).toBe(true);
+
+            controlServer.broadcastConfigChange(newConfJwsSigningKey);
+            await new Promise((wait) => setTimeout(wait, 1000));
+            expect(server.restart).toHaveBeenCalledWith(newConfJwsSigningKey);
+        });
+
+        it('does not update when jwsSigningKey is the same', async () => {
+            const newConfJwsSigningKey = JSON.parse(JSON.stringify(conf));
+            expect(server._shouldUpdateJwsSigningKey(newConfJwsSigningKey)).toBe(false);
+        });
     });
 });

package/modules/outbound-command-event-handler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/sdk-scheme-adapter-outbound-command-event-handler",
-  "version": "0.3.0-snapshot.44",
+  "version": "0.3.0-snapshot.47",
   "description": "Mojaloop sdk scheme adapter command event handler",
   "license": "Apache-2.0",
   "homepage": "https://github.com/mojaloop/sdk-scheme-adapter/",
@@ -51,16 +51,16 @@
     "convict": "6.2.4",
     "express": "4.21.2",
     "openapi-backend": "5.12.0",
-    "redis": "5.5.5",
+    "redis": "5.5.6",
     "swagger-ui-express": "5.0.1",
     "yamljs": "0.3.0"
   },
   "devDependencies": {
     "@eslint/compat": "1.2.9",
     "@types/convict": "6.1.6",
-    "@types/express": "5.0.2",
+    "@types/express": "5.0.3",
     "@types/jest": "29.5.14",
-    "@types/node": "22.15.29",
+    "@types/node": "22.15.30",
     "@types/node-cache": "4.2.5",
     "@types/supertest": "6.0.3",
     "@types/swagger-ui-express": "4.1.8",

package/modules/outbound-domain-event-handler/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@mojaloop/sdk-scheme-adapter-outbound-domain-event-handler",
-    "version": "0.3.0-snapshot.44",
+    "version": "0.3.0-snapshot.47",
     "description": "mojaloop sdk scheme adapter outbound domain event handler",
     "license": "Apache-2.0",
     "homepage": "https://github.com/mojaloop/sdk-scheme-adapter/",
@@ -49,15 +49,15 @@
         "convict": "6.2.4",
         "express": "4.21.2",
         "openapi-backend": "5.12.0",
-        "redis": "5.5.5",
+        "redis": "5.5.6",
         "swagger-ui-express": "5.0.1",
         "yamljs": "0.3.0"
     },
     "devDependencies": {
         "@types/convict": "6.1.6",
-        "@types/express": "5.0.2",
+        "@types/express": "5.0.3",
         "@types/jest": "29.5.14",
-        "@types/node": "22.15.29",
+        "@types/node": "22.15.30",
         "@types/node-cache": "4.2.5",
         "@types/supertest": "6.0.3",
         "@types/swagger-ui-express": "4.1.8",

package/modules/private-shared-lib/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/sdk-scheme-adapter-private-shared-lib",
-  "version": "0.4.0-snapshot.44",
+  "version": "0.4.0-snapshot.47",
   "description": "SDK Scheme Adapter private shared library.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/mojaloop/accounts-and-balances-bc/tree/main/modules/private-types",
@@ -35,12 +35,12 @@
     "@mojaloop/platform-shared-lib-messaging-types-lib": "0.7.2",
     "@mojaloop/platform-shared-lib-nodejs-kafka-client-lib": "0.5.18",
     "ajv": "8.17.1",
-    "redis": "5.5.5",
+    "redis": "5.5.6",
     "uuid": "11.1.0"
   },
   "devDependencies": {
     "@eslint/compat": "1.2.9",
-    "@types/node": "22.15.29",
+    "@types/node": "22.15.30",
     "@types/uuid": "10.0.0",
     "@typescript-eslint/eslint-plugin": "8.33.1",
     "@typescript-eslint/parser": "8.33.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/sdk-scheme-adapter",
-  "version": "24.9.8-snapshot.9",
+  "version": "24.10.0-snapshot.0",
   "description": "mojaloop sdk-scheme-adapter",
   "license": "Apache-2.0",
   "homepage": "https://github.com/mojaloop/sdk-scheme-adapter",
@@ -82,7 +82,7 @@
   },
   "devDependencies": {
     "@types/jest": "29.5.14",
-    "@types/node": "22.15.29",
+    "@types/node": "22.15.30",
     "@types/node-cache": "4.2.5",
     "@typescript-eslint/eslint-plugin": "8.33.1",
     "@typescript-eslint/parser": "8.33.1",
@@ -92,6 +92,7 @@
     "eslint-plugin-import": "2.31.0",
     "husky": "9.1.7",
     "jest": "29.7.0",
+    "knex": "3.1.0",
     "nodemon": "3.1.10",
     "npm-check-updates": "16.7.10",
     "replace": "1.2.2",