fix(deps): update dependency altcha-lib to v2 #162

Open
renovate-bot wants to merge 1 commit from renovate/altcha-lib-2.x into main
Contributor

This PR contains the following updates:

Package Change Age Confidence
altcha-lib (source) ^1.2.0^2.0.0 age confidence

Release Notes

altcha-org/altcha-lib (altcha-lib)

v2.5.0

Compare Source

Changes:

  • Support for Nest.js v12

v2.4.0

Compare Source

Changes:

  • Fix: nest.js with fastify [#​18]
  • Fix: nest.js registerAsync typing [#​19]

v2.3.2

Compare Source

Changes:

  • Fix: enforce keyPrefix in PoW v2 fallback verification

v2.3.1

Compare Source

Fixed

  • verifyHandler (the standalone /verify endpoint, meant for custom/external integrations) incorrectly called verifyServer under the hood when a verifyServer option was configured.

v2.3.0

Compare Source

Added

  • verifyServer() — verify a payload remotely via ALTCHA Sentinel's POST /v1/verify/signature API instead of checking the HMAC signature locally. Supports timeouts, retries (fixed/exponential backoff), custom fetch, and abort via AbortController.
  • All framework plugins (Express, Fastify, NestJS, Next.js, Nuxt/H3, SvelteKit, Hono) now accept a verifyServer option. When set, Sentinel-issued payloads are verified remotely through the existing verifyHandler/middleware — no custom routing needed.

Changed

  • hmacSignatureSecret, deriveKey, and createChallengeParameters are now optional on framework plugin options. A pure Sentinel-remote setup can be as small as create({ verifyServer: { url, secret } }) — no secret/deriveKey required. Calling challengeHandler without deriveKey/createChallengeParameters now fails with a clear configuration error instead of a confusing runtime failure.

v2.2.0

Compare Source

Changes:

  • Fix: frameworks - add default cache-control: no-store header [#​17]

v2.1.0

Compare Source

Changes:

  • Fix: fastify and express - throw error when throwOnFailure is set [#​16]

v2.0.3

Compare Source

v2.0.2

Compare Source

v2.0.1

Compare Source

Changes:

  • Fix: solveChallenge yielding and abort
  • New CLI utility

v2.0.0

Compare Source

Breaking changes:

  • This update introduces the new PoW mechanism v2, see documentation

Configuration

📅 Schedule: (in timezone America/Chicago)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [altcha-lib](https://altcha.org) ([source](https://github.com/altcha-org/altcha-lib)) | [`^1.2.0` → `^2.0.0`](https://renovatebot.com/diffs/npm/altcha-lib/1.4.1/2.5.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/altcha-lib/2.5.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/altcha-lib/1.4.1/2.5.0?slim=true) | --- ### Release Notes <details> <summary>altcha-org/altcha-lib (altcha-lib)</summary> ### [`v2.5.0`](https://github.com/altcha-org/altcha-lib/releases/tag/v2.5.0) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/v2.4.0...v2.5.0) Changes: - Support for Nest.js v12 ### [`v2.4.0`](https://github.com/altcha-org/altcha-lib/releases/tag/v2.4.0) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/v2.3.2...v2.4.0) Changes: - Fix: nest.js with fastify \[[#&#8203;18](https://github.com/altcha-org/altcha-lib/issues/18)] - Fix: nest.js registerAsync typing \[[#&#8203;19](https://github.com/altcha-org/altcha-lib/issues/19)] ### [`v2.3.2`](https://github.com/altcha-org/altcha-lib/releases/tag/v2.3.2) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/v2.3.1...v2.3.2) Changes: - Fix: enforce keyPrefix in PoW v2 fallback verification ### [`v2.3.1`](https://github.com/altcha-org/altcha-lib/releases/tag/v2.3.1) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/v2.3.0...v2.3.1) Fixed - `verifyHandler` (the standalone `/verify` endpoint, meant for custom/external integrations) incorrectly called `verifyServer` under the hood when a `verifyServer `option was configured. ### [`v2.3.0`](https://github.com/altcha-org/altcha-lib/releases/tag/v2.3.0) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/v2.2.0...v2.3.0) Added - `verifyServer()` — verify a payload remotely via ALTCHA Sentinel's `POST /v1/verify/signature` API instead of checking the HMAC signature locally. Supports timeouts, retries (fixed/exponential backoff), custom fetch, and abort via AbortController. - All framework plugins (Express, Fastify, NestJS, Next.js, Nuxt/H3, SvelteKit, Hono) now accept a `verifyServer` option. When set, Sentinel-issued payloads are verified remotely through the existing `verifyHandler/middleware` — no custom routing needed. Changed - `hmacSignatureSecret`, `deriveKey`, and `createChallengeParameters` are now optional on framework plugin options. A pure Sentinel-remote setup can be as small as `create({ verifyServer: { url, secret } })` — no secret/deriveKey required. Calling `challengeHandler` without `deriveKey/createChallengeParameters` now fails with a clear configuration error instead of a confusing runtime failure. ### [`v2.2.0`](https://github.com/altcha-org/altcha-lib/releases/tag/v2.2.0) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/v2.1.0...v2.2.0) Changes: - Fix: frameworks - add default cache-control: no-store header \[[#&#8203;17](https://github.com/altcha-org/altcha-lib/issues/17)] ### [`v2.1.0`](https://github.com/altcha-org/altcha-lib/releases/tag/v2.1.0) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/v2.0.3...v2.1.0) Changes: - Fix: fastify and express - throw error when throwOnFailure is set \[[#&#8203;16](https://github.com/altcha-org/altcha-lib/issues/16)] ### [`v2.0.3`](https://github.com/altcha-org/altcha-lib/compare/v2.0.2...v2.0.3) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/v2.0.2...v2.0.3) ### [`v2.0.2`](https://github.com/altcha-org/altcha-lib/compare/v2.0.1...v2.0.2) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/v2.0.1...v2.0.2) ### [`v2.0.1`](https://github.com/altcha-org/altcha-lib/releases/tag/v2.0.1) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/v2.0.0...v2.0.1) Changes: - Fix: solveChallenge yielding and abort - New CLI utility ### [`v2.0.0`](https://github.com/altcha-org/altcha-lib/releases/tag/v2.0.0) [Compare Source](https://github.com/altcha-org/altcha-lib/compare/1.4.1...v2.0.0) Breaking changes: - This update introduces the new PoW mechanism v2, see [documentation](https://altcha.org/docs/v2/widget-v3/) </details> --- ### Configuration 📅 **Schedule**: (in timezone America/Chicago) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMyIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
fix(deps): update dependency altcha-lib to v2
Some checks failed
CI / API — typecheck & tests (push) Failing after 1m23s
CI / App — typecheck, test & build (push) Successful in 1m39s
CI / API — typecheck & tests (pull_request) Failing after 2m2s
CI / App — typecheck, test & build (pull_request) Successful in 2m6s
CI / Images — production build (pull_request) Failing after 1m41s
CI / Images — production build (push) Failing after 3m31s
0af2c6fb4d
renovate-bot force-pushed renovate/altcha-lib-2.x from 0af2c6fb4d
Some checks failed
CI / API — typecheck & tests (push) Failing after 1m23s
CI / App — typecheck, test & build (push) Successful in 1m39s
CI / API — typecheck & tests (pull_request) Failing after 2m2s
CI / App — typecheck, test & build (pull_request) Successful in 2m6s
CI / Images — production build (pull_request) Failing after 1m41s
CI / Images — production build (push) Failing after 3m31s
to 31d64885ab
Some checks failed
CI / App — typecheck, test & build (push) Successful in 1m8s
CI / API — typecheck & tests (push) Failing after 1m15s
CI / API — typecheck & tests (pull_request) Failing after 1m17s
CI / Images — production build (push) Failing after 1m32s
CI / Images — production build (pull_request) Failing after 1m32s
CI / App — typecheck, test & build (pull_request) Successful in 1m46s
2026-08-30 12:14:54 +00:00
Compare
renovate-bot force-pushed renovate/altcha-lib-2.x from 31d64885ab
Some checks failed
CI / App — typecheck, test & build (push) Successful in 1m8s
CI / API — typecheck & tests (push) Failing after 1m15s
CI / API — typecheck & tests (pull_request) Failing after 1m17s
CI / Images — production build (push) Failing after 1m32s
CI / Images — production build (pull_request) Failing after 1m32s
CI / App — typecheck, test & build (pull_request) Successful in 1m46s
to 74947ee09d
Some checks failed
CI / API — typecheck & tests (push) Failing after 1m24s
CI / API — typecheck & tests (pull_request) Failing after 1m4s
CI / App — typecheck, test & build (pull_request) Successful in 1m18s
CI / Images — production build (pull_request) Failing after 1m17s
CI / Images — production build (push) Failing after 2m5s
CI / App — typecheck, test & build (push) Successful in 3m1s
2026-09-10 06:19:35 +00:00
Compare
Some checks failed
CI / API — typecheck & tests (push) Failing after 1m24s
Required
Details
CI / API — typecheck & tests (pull_request) Failing after 1m4s
Required
Details
CI / App — typecheck, test & build (pull_request) Successful in 1m18s
Required
Details
CI / Images — production build (pull_request) Failing after 1m17s
Required
Details
CI / Images — production build (push) Failing after 2m5s
Required
Details
CI / App — typecheck, test & build (push) Successful in 3m1s
Required
Details
Some required checks were not successful.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/altcha-lib-2.x:renovate/altcha-lib-2.x
git switch renovate/altcha-lib-2.x
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
rbrooks/TeaLeaves!162
No description provided.