kxco-post-quantum 1.6.2 → 1.6.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +16 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,21 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 1.6.3
|
|
4
|
+
|
|
5
|
+
Release plumbing only. No source change.
|
|
6
|
+
|
|
7
|
+
1.6.2 shipped without its evidence bundle, because the upload step was gated on
|
|
8
|
+
a `release` event that cannot occur: publish.yml creates the release with the
|
|
9
|
+
default GITHUB_TOKEN, and GitHub raises no workflow events for actions taken
|
|
10
|
+
with that token. The bundle attached by hand afterwards came from a
|
|
11
|
+
push-triggered build, so it carried 855 subsampled vectors while the README
|
|
12
|
+
states that 1,479 are in the downloadable bundle. Correctly labelled in the
|
|
13
|
+
manifest, but not what the README describes.
|
|
14
|
+
|
|
15
|
+
This release exists so a tag produces the bundle the README promises: the
|
|
16
|
+
workflow now runs on `v*` tags, treats a tag as a full build rather than a
|
|
17
|
+
subsampled one, and uploads without a human in the loop.
|
|
18
|
+
|
|
3
19
|
## 1.6.2
|
|
4
20
|
|
|
5
21
|
No change to the cryptography, the exports or the wire format. This release
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "kxco-post-quantum",
|
|
3
|
-
"version": "1.6.
|
|
3
|
+
"version": "1.6.3",
|
|
4
4
|
"description": "ML-DSA-65, ML-KEM-768 and SLH-DSA-SHA2-192s with key fingerprinting. OpenSSL 3.5 primitives on Node 24+, JavaScript elsewhere. 2,103 NIST ACVP vectors and 225 cross-implementation interop checks, 0 failed. Reproducible builds and SLSA provenance.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"post-quantum",
|