Merge pull request #45 from Bhutan-NDI/credebl-sync-v2.2.0

CREDEBL Sync v2.2.0

Author: kinxa0

.env.demo

@@ -0,0 +1,61 @@
+# .github/dependabot.yml
+
+version: 2
+
+updates:
+  # =========================
+  # Yarn Dependencies (via npm ecosystem)
+  # =========================
+  - package-ecosystem: 'npm' # ← use "npm", not "yarn"
+    directory: '/' # or "/client" if package.json is inside a subfolder
+    target-branch: 'main' # always open PRs against main
+    schedule:
+      interval: 'weekly'
+      day: 'monday'
+      time: '09:00'
+      timezone: 'Asia/Kolkata'
+    open-pull-requests-limit: 10
+
+    groups:
+      minor-updates:
+        patterns:
+          - '*'
+        update-types:
+          - 'minor'
+
+    allow:
+      - dependency-type: 'all'
+
+    labels:
+      - 'dependencies'
+      - 'yarn' # you can keep this label for clarity
+
+    commit-message:
+      prefix: 'chore'
+      include: 'scope'
+
+  # =========================
+  # GitHub Actions
+  # =========================
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    target-branch: 'main' # always open PRs against main
+    schedule:
+      interval: 'weekly'
+      day: 'monday'
+      time: '09:00'
+      timezone: 'Asia/Kolkata'
+
+    labels:
+      - 'dependencies'
+      - 'github-actions'
+
+    commit-message:
+      prefix: 'ci'
+
+    groups:
+      minor-updates:
+        patterns:
+          - '*'
+        update-types:
+          - 'minor'

.env.sample

@@ -0,0 +1 @@
+sonar.exclusions=samples/cliConfig.json,src/routes/routes.ts

.github/dependabot.yml

@@ -1,5 +1,5 @@
 # Stage 1: Builder stage
-FROM node:18.19.0 AS builder
+FROM node:22.22.2 AS builder
 
 WORKDIR /app
 
@@ -18,8 +18,15 @@ RUN yarn global add patch-package
 # Build the application
 RUN yarn build
 
-# Stage 2: Production stage
-FROM node:18.19.0-slim
+# Stage 2: Production stage  
+FROM node:22.22.2-slim
+
+# Update system packages and install security updates
+RUN apt-get update && apt-get upgrade -y && \
+    apt-get install -y --no-install-recommends \
+    ca-certificates && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
 
 WORKDIR /app
 
@@ -30,5 +37,12 @@ COPY --from=builder /app/package.json ./
 COPY --from=builder /app/node_modules ./node_modules
 COPY --from=builder /app/patches ./patches
 
+# Create non-root user for security
+RUN groupadd -r appuser && useradd -r -g appuser appuser && \
+    chown -R appuser:appuser /app && \
+    chmod -R 755 /app
+
+USER appuser
+
 # Set entry point
 ENTRYPOINT ["node", "./bin/afj-rest.js", "start"]

.sonarcloud.properties

@@ -9,12 +9,12 @@ const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 
 export default [
+  {
+    ignores: ['**/build/**', '**/*.js', '**/*.d.ts'],
+  },
   {
     ignores: [
-      '**/tests/*', 
-      '**/build/**', 
-      '**/*.js',
-      '**/*.d.ts',
+      '**/tests/*',
     ],
     files: ['**/*.ts'],
     languageOptions: {

Dockerfile

@@ -2,7 +2,7 @@
   "name": "credo-controller",
   "main": "build/index",
   "types": "build/index",
-  "version": "2.1.2",
+  "version": "2.1.3",
   "files": [
     "build"
   ],
@@ -39,18 +39,20 @@
     "validate": "yarn lint && yarn check-types && yarn check-format"
   },
   "dependencies": {
-    "@ayanworks/credo-polygon-w3c-module": "1.0.1-alpha.1",
-    "@credo-ts/anoncreds": "0.5.15",
-    "@credo-ts/askar": "0.5.15",
-    "@credo-ts/core": "0.5.15",
-    "@credo-ts/indy-vdr": "0.5.15",
-    "@credo-ts/node": "^0.5.15",
+    "@ayanworks/credo-polygon-w3c-module": "2.0.2",
+    "@sd-jwt/jwt-status-list": "0.19.0",
+    "@credo-ts/anoncreds": "0.6.2",
+    "@credo-ts/askar": "0.6.2",
+    "@credo-ts/core": "0.6.2",
+    "@credo-ts/didcomm": "0.6.2",
+    "@credo-ts/indy-vdr": "0.6.2",
+    "@credo-ts/node": "0.6.2",
+    "@credo-ts/openid4vc": "0.6.2",
     "@credo-ts/push-notifications": "^0.7.1",
-    "@credo-ts/question-answer": "0.5.15",
-    "@credo-ts/tenants": "0.5.15",
-    "@hyperledger/anoncreds-nodejs": "0.3.1",
-    "@hyperledger/aries-askar-nodejs": "0.2.3",
-    "@hyperledger/indy-vdr-nodejs": "0.2.2",
+    "@credo-ts/question-answer": "0.6.2",
+    "@credo-ts/tenants": "0.6.2",
+    "@hyperledger/anoncreds-nodejs": "^0.3.4",
+    "@hyperledger/indy-vdr-nodejs": "^0.2.3",
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/exporter-logs-otlp-http": "^0.202.0",
     "@opentelemetry/exporter-trace-otlp-http": "^0.202.0",
@@ -61,26 +63,30 @@
     "@opentelemetry/sdk-logs": "^0.202.0",
     "@opentelemetry/sdk-node": "^0.202.0",
     "@opentelemetry/semantic-conventions": "^1.34.0",
+    "@openwallet-foundation/askar-nodejs": "^0.4.3",
     "@tsoa/runtime": "^6.6.0",
     "@types/node-fetch": "^2.6.4",
     "@types/ref-struct-di": "^1.1.12",
     "@types/uuid": "^10.0.0",
     "@types/ws": "^8.18.1",
-    "axios": "^1.9.0",
+    "axios": "1.13.5",
     "body-parser": "^2.2.0",
     "cors": "^2.8.5",
     "dotenv": "^16.5.0",
     "express": "^5.1.0",
     "express-rate-limit": "^7.5.0",
     "joi": "^17.13.3",
     "jsonwebtoken": "^9.0.2",
+    "nats": "^2.29.3",
+    "node-cron": "^4.2.1",
     "node-fetch": "2",
     "patch-package": "^8.0.0",
     "reflect-metadata": "^0.2.2",
     "swagger-ui-express": "^4.4.0",
     "tslog": "^3.3.3",
     "tsoa": "^6.0.1",
-    "tsyringe": "^4.8.0",
+    "tsyringe": "^4.10.0",
+    "uuid": "^13.0.0",
     "ws": "^8.18.2",
     "yargs": "^17.7.2"
   },
@@ -94,6 +100,7 @@
     "@types/jsonwebtoken": "^9.0.9",
     "@types/multer": "^1.4.12",
     "@types/node": "^20.17.0",
+    "@types/node-cron": "^3.0.11",
     "@types/ref-array-di": "^1.2.8",
     "@types/ref-struct-di": "^1.1.12",
     "@types/supertest": "^6.0.3",
@@ -115,7 +122,9 @@
     "typescript": "^5.8.3"
   },
   "resolutions": {
-    "@credo-ts/core": "0.5.15",
-    "@credo-ts/askar": "0.5.15"
+    "@credo-ts/core": "0.6.2",
+    "@credo-ts/askar": "0.6.2",
+    "flatted": "3.4.0",
+    "undici": "6.24.0"
   }
 }