4432 Commits

Author SHA1 Message Date
Allan Leary
e36c7a8c5d Migrate JWT Verify and JWT Decode from jsonwebtoken to jose
jsonwebtoken is unmaintained and does not work correctly in the
browser at 9.x. Following the JWT Sign migration (#2473), switch the
remaining two JWT operations to jose and remove the jsonwebtoken
dependency. Unsigned (alg:none) tokens are now rejected by Verify,
and PKCS#1 RSA public keys are converted to SPKI for WebCrypto.
2026-07-07 09:43:50 +01:00
Allan Leary
8af8dd2477 Merge remote-tracking branch 'upstream/master' 2026-07-07 08:45:02 +01:00
Allan Leary
0d4ac3ec82 Merge awaiting-response-label workflow onto main for live testing
Temporary: needed so pull_request_review/pull_request_target/issue_comment
triggers are recognised for the throwaway test PR. Revert this merge
commit once testing is done to keep main aligned with upstream/master.
2026-07-06 09:35:25 +01:00
Allan Leary
9a898cd611 Added trigger for comments from contributor to remove 'awaiting response' label for cases where reviewer asks a question 2026-07-06 09:12:31 +01:00
Allan Leary
bb00e2059b Add workflow to label PRs awaiting author response 2026-07-06 08:29:01 +01:00
Thomas M
002ed911b1
feat: add TEA and XTEA block ciphers (#2225) 2026-07-05 13:22:27 +01:00
Thomas M
fa219d96f1
feat: add PRESENT and Twofish ciphers (#2157) 2026-07-05 11:11:31 +01:00
MAN$I VERMA
19c8a8a310
fix: support constructor and __proto__ parameters in Parse URI (#2578) (#2581) 2026-07-04 18:04:50 +01:00
MAN$I VERMA
86746296be
feat: Implement automated option-type ingredient validation (#2625) 2026-07-04 12:20:33 +01:00
Thomas M
9ab5108664
Add Ascon (NIST SP 800-232) operations: Hash, MAC, Encrypt, Decrypt (#2155) 2026-07-04 11:32:23 +01:00
dependabot[bot]
4707ddb861
chore (deps): bump the patch-updates group across 1 directory with 6 updates (#2638)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 17:22:33 +01:00
dependabot[bot]
eaf185242a
chore (deps): bump webpack from 5.107.2 to 5.108.3 in the minor-updates group (#2635)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 16:26:10 +01:00
dependabot[bot]
a4edfdd770
chore (deps): bump nginxinc/nginx-unprivileged from 458ecbe to fd3314e in the docker-dependencies group (#2633)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 16:13:41 +01:00
GCHQDeveloper581
3ca7c792df
Feature: automatically expire PRs if CLA remains unsigned for an extended period (#2636) 2026-07-03 15:54:10 +01:00
alleria173
79de8f1199
fix/2445 HOTP (and 2426 TOTP) type errors (#2620) 2026-07-03 11:58:00 +00:00
loki1205
eccaf723f5
Fix base32 unicode alphabet (#2380) 2026-07-03 11:39:33 +01:00
GCHQDeveloper581
740d350306
Add a workflow to automatically flag PRs without a signed CLA (#2627) 2026-07-03 11:28:53 +01:00
alleria173
c51e21a242
fix/2444 TOTP input validation for correct otpauth uri generation (#2621) 2026-07-03 10:23:06 +00:00
Kirill
179eb9a379
Validate Wrap line width (#2606)
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
Co-authored-by: C85297 <95289555+C85297@users.noreply.github.com>
2026-07-03 11:06:55 +01:00
Zain Nadeem
961bbab682
Handle malformed image parser errors in View Bit Plane (#2612) 2026-07-03 09:02:14 +00:00
alleria173
3104e6073f
Fixes #2446 hotp otpauth uri validation (#2614) 2026-07-03 08:54:38 +00:00
Zain Nadeem
6f95a2e17d
Handle invalid bcrypt salt errors in Bcrypt compare (#2615) 2026-07-03 08:52:04 +00:00
Kirill
d6f087efad
Validate empty Show On Map options (#2631) 2026-07-03 08:47:06 +00:00
GCHQ Developer 85297
3c32e3f64d
Create AGENTS.md file (#2619) 2026-07-01 14:44:23 +01:00
GCHQDeveloper581
766100aad0
Set parameter validation Metadata for GenerateImage operations (#2611) 2026-07-01 10:45:40 +01:00
GCHQDeveloper581
89feb7f9e9
Update 4 vulnerable dependencies (#2616) 2026-07-01 10:35:10 +01:00
GCHQDeveloper581
275b594f7c
Fix BigNumber deserialisation in Dish, and add tests (#2607)
With ideas from: cyphercodes <cyphercodes@users.noreply.github.com>
With ideas from: Sivachandran Paramasivam <sivachandran.p@gmail.com>
2026-06-26 12:07:33 +00:00
dependabot[bot]
2329a0a0e5
chore (deps): bump the docker-dependencies group with 2 updates (#2600)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 11:20:20 +01:00
dependabot[bot]
e112da3c12
chore (deps): bump the patch-updates group with 8 updates (#2602)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 11:08:47 +01:00
dependabot[bot]
9672a8f870
chore (deps): bump actions/checkout from 6.0.3 to 7.0.0 in the actions-dependencies group (#2601)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 09:25:12 +01:00
dependabot[bot]
6717ae1bc3
chore (deps): bump the minor-updates group with 2 updates (#2603)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 09:24:51 +01:00
Kirill
bd4c59cf34
Handle empty Generate Image mode (#2598) 2026-06-25 11:59:33 +00:00
Zain Nadeem
0e50d32ec5
Fix stale presenter after expected operation errors (#2589)
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (tweaked tests)
2026-06-24 16:39:01 +00:00
GCHQDeveloper581
9f87fec52d
Clean up/rationalise webpack paths and thereby increase compatibility for Win… (#2585) 2026-06-22 11:52:26 +01:00
GCHQDeveloper581
080357a4f5
Improve parameter validation for a number of operations where exceptions otherwise caused. (#2586) 2026-06-22 11:51:12 +01:00
Leon Zandman
a0a369a7ef
Fix uncaught TypeError in "Show on map" operation. (#2453) 2026-06-20 12:01:14 +01:00
min23asdw
0d2af8ce00
fix: jsonata $base64decode/$base64encode in Web Worker (#2275) 2026-06-20 11:40:37 +01:00
Willi Ballenthin
08e5c13da4
fix Dechunk HTTP Response leaks terminating chunk and trailers into output (#2290) 2026-06-20 09:49:47 +00:00
Willi Ballenthin
64fc664479
fix: MIME Decoding corrupts non-ASCII characters in Base64-encoded words (#2291) 2026-06-20 10:41:53 +01:00
Willi Ballenthin
8105e3eb07
fix: Gzip comment with header checksum produces corrupt streams (#2288) 2026-06-20 09:03:12 +01:00
Willi Ballenthin
0a0d95bcbd
fix TLV Parser BER long-form length parsing (#2289) 2026-06-20 08:59:30 +01:00
Willi Ballenthin
9a8a279b82
fix: Unescape Unicode Characters accepts 4-6 hex digits for U+ prefix (#2287) 2026-06-20 08:56:09 +01:00
Willi Ballenthin
5a2eeed066
fix Set Difference and Set Intersection preserve duplicates from first sample (#2286) 2026-06-20 08:52:56 +01:00
Willi Ballenthin
0fd6190b46
fix: From Base operation produces wrong results for fractional inputs (#2285)
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-06-20 08:48:49 +01:00
Willi Ballenthin
f0468d391d
fix Median operation returns incorrect result for unsorted odd-length inputs (#2284) 2026-06-20 07:21:07 +00:00
Shailendra Singh
ddbe914132
Added RenderPDF functionality (#2105)
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> very basic unit testing
2026-06-19 18:29:40 +00:00
GCHQ Developer 85297
4a70dff3f2
Fix URL encoding incorrectly converting input to UTF-8 (#2340) 2026-06-19 14:01:19 +01:00
MAN$I VERMA
33c2207427
feat: Add automated parameter validation framework (#2561) 2026-06-19 12:59:04 +01:00
Shailendra Singh
e18441d430
Fix: added viewport styles to img tag in RenderImage Dish (#2109)
Co-authored-by: GCHQ Developer 85297 <95289555+C85297@users.noreply.github.com>
2026-06-19 11:56:11 +01:00
dependabot[bot]
43f19c0494
chore (deps): bump form-data from 4.0.5 to 4.0.6 (#2572)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-19 09:46:59 +01:00