Skip to content

Release 0.5.1: Digital Credentials API in the SDK iframe - #32

Merged
arosasg merged 1 commit into
masterfrom
release/0.5.1
Oct 31, 2026
Merged

arosasg merged 1 commit into
masterfrom
release/0.5.1

Conversation

@arosasg

@arosasg arosasg commented Oct 31, 2026

Copy link
Copy Markdown
Contributor

Problem

@didit-protocol/sdk-web 0.5.0 on npm does not list digital-credentials-get in the verification iframe's allow attribute.
A page that embeds the flow with the published SDK (modal or embedded) therefore cannot reach a digital ID wallet: the browser blocks the W3C Digital Credentials API inside the iframe, so the hosted flow cannot offer Google Wallet.
The fix is already on master (#25), together with lifecycle fixes from #26, but none of it is published.
Those lifecycle fixes were also listed under [0.5.0] in the changelog although 0.5.0 did not contain them.

Solution

  • Bump the package to 0.5.1 (npm version 0.5.1 --no-git-tag-version).
  • Add the [0.5.1] changelog section that release.yml turns into the GitHub release notes: the new iframe permission, plus the five fixes moved out of [0.5.0], which goes back to what actually shipped.
  • No code changes. @didit-protocol/signals needs no release: 0.5.1 still depends on ^0.1.0, which is published.

After merge, the v0.5.1 tag runs release.yml, which publishes to npm through trusted publishing.

Verification

  • npm ci then npm run test:build-version: Verified package-derived SDK_VERSION 0.5.1 and simulated 9.8.7.
  • The built dist/didit-sdk.umd.min.js, didit-sdk.module.js and didit-sdk.cjs contain digital-credentials-get.
  • The release workflow's awk extraction of [0.5.1] from CHANGELOG.md returns the new section.
  • The same master build, embedded in a page on another origin, renders the hosted flow in an iframe whose allow ends with digital-credentials-get.

🤖 Generated with Claude Code

Release notes for the iframe's digital-credentials-get permission and the
lifecycle fixes that landed after 0.5.0 was published (they were listed under
0.5.0, which did not contain them).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@arosasg

arosasg commented Oct 31, 2026

Copy link
Copy Markdown
Contributor Author

Codex review (codex CLI, account codex-6, model gpt-5.6-sol)


💡 Code review

Reviewed commit: 2267e2c

P2 Badge Correct the 0.5.1 release date

CHANGELOG.md:L5 - view

The new 0.5.1 entry is dated 2026-10-31, while the preceding 0.5.0 release is dated 2026-11-01, making the later semantic version appear to have been released earlier. Update the new entry to its actual release date, or correct the 0.5.0 date if that existing date is inaccurate.

Verdict: APPROVE

@arosasg
arosasg merged commit 58855ba into master Oct 31, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant