@octokit/webhooks-methods - npm Package Compare versions

Comparing version 5.0.0-beta.3 to 5.0.0-beta.4

dist-node/index.js

@@ -6,3 +6,2 @@ // pkg/dist-src/node/sign.js
 var Algorithm = /* @__PURE__ */ ((Algorithm2) => {
-  Algorithm2["SHA1"] = "sha1";
   Algorithm2["SHA256"] = "sha256";
@@ -13,3 +12,3 @@ return Algorithm2;
 // pkg/dist-src/version.js
-var VERSION = "5.0.0-beta.3";
+var VERSION = "5.0.0-beta.4";
 
@@ -32,3 +31,3 @@ // pkg/dist-src/node/sign.js
     throw new TypeError(
-      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`
+      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be 'sha256'`
     );
@@ -43,9 +42,2 @@ }
 import { Buffer } from "node:buffer";
-
-// pkg/dist-src/utils.js
-var getAlgorithm = (signature) => {
-  return signature.startsWith("sha256=") ? "sha256" : "sha1";
-};
-
-// pkg/dist-src/node/verify.js
 async function verify(secret, eventPayload, signature) {
@@ -63,3 +55,3 @@ if (!secret || !eventPayload || !signature) {
   const signatureBuffer = Buffer.from(signature);
-  const algorithm = getAlgorithm(signature);
+  const algorithm = "sha256";
   const verificationBuffer = Buffer.from(
@@ -66,0 +58,0 @@ await sign({ secret, algorithm }, eventPayload)

dist-src/node/sign.js

@@ -19,3 +19,3 @@ import { createHmac } from "node:crypto";
     throw new TypeError(
-      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`
+      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be 'sha256'`
     );
@@ -22,0 +22,0 @@ }

dist-src/node/verify.js

@@ -5,3 +5,2 @@ import { timingSafeEqual } from "node:crypto";
 import { VERSION } from "../version.js";
-import { getAlgorithm } from "../utils.js";
 async function verify(secret, eventPayload, signature) {
@@ -19,3 +18,3 @@ if (!secret || !eventPayload || !signature) {
   const signatureBuffer = Buffer.from(signature);
-  const algorithm = getAlgorithm(signature);
+  const algorithm = "sha256";
   const verificationBuffer = Buffer.from(
@@ -22,0 +21,0 @@ await sign({ secret, algorithm }, eventPayload)

dist-src/types.js

 var Algorithm = /* @__PURE__ */ ((Algorithm2) => {
-  Algorithm2["SHA1"] = "sha1";
   Algorithm2["SHA256"] = "sha256";
@@ -4,0 +3,0 @@ return Algorithm2;

dist-src/version.js

@@ -1,4 +0,4 @@
-const VERSION = "5.0.0-beta.3";
+const VERSION = "5.0.0-beta.4";
 export {
   VERSION
 };

dist-src/web.js

 import { Algorithm } from "./types.js";
-import { getAlgorithm } from "./utils.js";
 const enc = new TextEncoder();
@@ -16,3 +15,2 @@ function hexToUInt8Array(string) {
   return {
-    [Algorithm.SHA1]: "SHA-1",
     [Algorithm.SHA256]: "SHA-256"
@@ -52,3 +50,3 @@ }[algorithm];
     throw new TypeError(
-      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`
+      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be 'sha256'`
     );
@@ -74,3 +72,3 @@ }
   }
-  const algorithm = getAlgorithm(signature);
+  const algorithm = "sha256";
   return await crypto.subtle.verify(
@@ -77,0 +75,0 @@ "HMAC",

dist-types/types.d.ts

 export declare enum Algorithm {
-    SHA1 = "sha1",
     SHA256 = "sha256"
 }
-export type AlgorithmLike = Algorithm | "sha1" | "sha256";
+export type AlgorithmLike = Algorithm | "sha256";
 export type SignOptions = {
@@ -7,0 +6,0 @@ secret: string;

dist-types/version.d.ts

@@ -1,1 +0,1 @@
-export declare const VERSION = "5.0.0-beta.3";
+export declare const VERSION = "5.0.0-beta.4";

dist-web/index.js

 // pkg/dist-src/types.js
 var Algorithm = /* @__PURE__ */ ((Algorithm2) => {
-  Algorithm2["SHA1"] = "sha1";
   Algorithm2["SHA256"] = "sha256";
@@ -8,7 +7,2 @@ return Algorithm2;
 
-// pkg/dist-src/utils.js
-var getAlgorithm = (signature) => {
-  return signature.startsWith("sha256=") ? "sha256" : "sha1";
-};
-
 // pkg/dist-src/web.js
@@ -28,3 +22,2 @@ var enc = new TextEncoder();
   return {
-    [Algorithm.SHA1]: "SHA-1",
     [Algorithm.SHA256]: "SHA-256"
@@ -64,3 +57,3 @@ }[algorithm];
     throw new TypeError(
-      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`
+      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be 'sha256'`
     );
@@ -86,3 +79,3 @@ }
   }
-  const algorithm = getAlgorithm(signature);
+  const algorithm = "sha256";
   return await crypto.subtle.verify(
@@ -89,0 +82,0 @@ "HMAC",

package.json

@@ -7,3 +7,3 @@ {
   "type": "module",
-  "version": "5.0.0-beta.3",
+  "version": "5.0.0-beta.4",
   "description": "Methods to handle GitHub Webhook requests",
@@ -10,0 +10,0 @@ "repository": "github:octokit/webhooks-methods.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

27770

decreased by-5.73%

Number of package files

19

decreased by-9.52%

Lines of code

360

decreased by-6.25%

No dependency changes