openvibers/openvibe.search Commits

openvibe-shared v4.202.0 (was v4.201.0) (#281)

OP OpenVibers committed 2 days ago · 7b4b529fb6 · 5 files, +9 −8

* openvibe-shared v4.202.0 (was v4.201.0)

Opened by scripts/pin-bump.js in OpenVibers/OpenVibe.Shared after the v4.202.0 release.

* test: refuse a future v2 timestamp outside the replay window

Changes

ddiff --git a/README.md b/README.md
iindex 0f62b2d..aa11337 100644
---- a/README.md
++++ b/README.md
@@@ -548,5 +548,5 @@ Part of the [OpenVibe network](https://openvibe.network). Built in the open by [
  <!-- versions:start -->
  - openvibe-contracts: v0.399.0
  - openvibe-sdk: v0.147.0
--- openvibe-shared: v4.201.0
++- openvibe-shared: v4.202.0
  <!-- versions:end -->
ddiff --git a/STATUS.json b/STATUS.json
iindex 33cadc3..858cab0 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -9,7 +9,7 @@
    "domain": "search.openvibe.network (vhost in deploy/nginx; the service manifest records the search page and query API as public since 2026-09-23)",
    "contracts": "openvibe-contracts v0.399.0",
    "sdk": "openvibe-sdk v0.147.0",
--  "shared": "openvibe-shared v4.201.0",
++  "shared": "openvibe-shared v4.202.0",
    "capabilities": [
      "search.document.write",
      "search.query.delegate",
ddiff --git a/package-lock.json b/package-lock.json
iindex 461f14d..9f23494 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -15,7 +15,7 @@
          "express": "^4.21.2",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.399.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.147.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.201.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.202.0",
          "pg": "^8.23.0"
        },
        "devDependencies": {
@@@ -1150,9 +1150,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "4.201.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.201.0",
--      "integrity": "sha512-dZuifDLCoMlg+Qg/2G7IE3NbCqd2fZuk0G32JODgFRWS+CaHHTUTwWBBieJkuaUa1IV2xETe8qtbdLwekhvatg==",
++      "version": "4.202.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.202.0",
++      "integrity": "sha512-lSZavwvUc8nI7eS7ZzLjVaz2d2xVmvYGh81H83d+i1LPp7cbS7eK9HCiQS8ESK9N8eH0i/Ok+sqBFxeUwsnVPQ==",
        "license": "MIT",
        "dependencies": {
          "clean-css": "^5.3.3",
ddiff --git a/package.json b/package.json
iindex 22c74aa..55a0613 100644
---- a/package.json
++++ b/package.json
@@@ -27,7 +27,7 @@
      "express": "^4.21.2",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.399.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.147.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.201.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.202.0",
      "pg": "^8.23.0"
    },
    "engines": {
ddiff --git a/test/webhook-inbox.test.js b/test/webhook-inbox.test.js
iindex e74cfbf..b610845 100644
---- a/test/webhook-inbox.test.js
++++ b/test/webhook-inbox.test.js
@@@ -27,7 +27,8 @@ t('signature v2 is required: a v1-only delivery and a stale v2 timestamp are ref
      assert.strictEqual(v1.status, 401, 'v1 only (v2 stripped): refused');
      const stale = await deliver(svc.base, e, { now: Date.now() - 301000 });
      assert.strictEqual(stale.status, 401, 'stale v2 (outside the 300 s window): refused');
--    const future = await deliver(svc.base, e, { now: Date.now() + 301000 });
++    // One hour ahead, not 301 s: at the exact edge, a slow request can land inside the 300 s window.
++    const future = await deliver(svc.base, e, { now: Date.now() + 3600000 });
      assert.strictEqual(future.status, 401, 'v2 from too far in the future: refused');
      assert.strictEqual((await search('omiword')).length, 0);
      assert.strictEqual(await receipts(), 0);