Version Packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@ingram-tech/nk-api@0.3.0

Minor Changes

• f14fdc4: Add two primitives every API seam was re-implementing:

  • Rate limiting — checkRateLimit / getClientKey (framework-agnostic,
    zero-dep, per-instance fixed-window) plus a rateLimit() Hono middleware that
    emits the standard 429 envelope with Retry-After and X-RateLimit-*
    headers. The no-Redis default for cutting off single-client abuse.
  • Webhook signature verification — verifyHmacSha256 does a length-checked,
    constant-time HMAC-SHA256 compare (hex or base64, optional sha256= prefix)
    for the /internal/webhooks/<provider> route class. Stripe keeps using its
    own SDK via nk-billing.

  Also adds 429 to the shared errorResponses map.

@ingram-tech/nk-db@1.1.0

Minor Changes

• f14fdc4: Add decodeOrNull to the createIdRegistry id helpers — the throw-free
  counterpart to decode, returning null for a foreign or malformed prefixed
  id. Lets routes validate an untrusted path/query id without a try/catch
  (ids.org.decodeOrNull(param) ?? notFound()). Additive; existing helpers
  unchanged.

@ingram-tech/nk-auth@0.9.1

Patch Changes

• f14fdc4: Harden verifyBackendJwt against Better Auth signing-key rotation. jose's
  createRemoteJWKSet refuses to refetch the JWKS for its 30s cooldown after any
  fetch, so a token signed with a freshly rotated key (whose kid isn't yet in
  the cached set) failed for the whole cooldown window — surfacing as a ~30s burst
  of auth failures on every token-verifying request. On a JWKSNoMatchingKey miss
  we now force one .reload() (which bypasses the cooldown) and retry, so a
  rotation costs one extra fetch instead of a brief outage. Backward-compatible.
• Updated dependencies [f14fdc4]
  • @ingram-tech/nk-db@1.1.0