decentralized-identity · renovate · Jun 12, 2026
diff --git a/.github/workflows/build-and-test-on-pr.yml b/.github/workflows/build-and-test-on-pr.yml
@@ -6,22 +6,22 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
-      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           version: 10
       - name: 'Setup Node.js with pnpm cache'
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 20
           cache: 'pnpm'
 
       - run: pnpm install
       - run: pnpm build
       - name: 'Save build output'
-        uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: '${{ github.workspace }}'
           key: '${{ runner.os }}-build-${{ github.sha }}-${{ github.run_id }}'
@@ -34,26 +34,26 @@ jobs:
         shard: [1, 2, 3, 4, 5]
     services:
       postgres:
-        image: postgres:16.0
+        image: postgres:16.14
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: test123
         ports:
           - 5432:5432
         options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
     steps:
-      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           version: 10
       - name: 'Restore build output'
-        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: '${{ github.workspace }}'
           key: '${{ runner.os }}-build-${{ github.sha }}-${{ github.run_id }}'
           restore-keys: '${{ runner.os }}-build-${{ github.sha }}'
           fail-on-cache-miss: true
       - name: 'Setup Node.js with pnpm cache'
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 20
           cache: 'pnpm'
@@ -77,7 +77,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [test-integration]
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
       - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
@@ -87,7 +87,7 @@ jobs:
           path: coverage
       - name: Merge Code Coverage
         run: npx nyc merge coverage/ coverage/coverage-final.json
-      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+      - uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5.5.5
         with:
           token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos but sometimes fails without :|
           fail_ci_if_error: true
@@ -96,18 +96,18 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           version: 10
       - name: 'Restore build output'
-        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: '${{ github.workspace }}'
           key: '${{ runner.os }}-build-${{ github.sha }}-${{ github.run_id }}'
           restore-keys: '${{ runner.os }}-build-${{ github.sha }}'
           fail-on-cache-miss: true
       - name: 'Setup Node.js with pnpm cache'
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 20
           cache: 'pnpm'
@@ -120,18 +120,18 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           version: 10
       - name: 'Restore build output'
-        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: '${{ github.workspace }}'
           key: '${{ runner.os }}-build-${{ github.sha }}-${{ github.run_id }}'
           restore-keys: '${{ runner.os }}-build-${{ github.sha }}'
           fail-on-cache-miss: true
       - name: 'Setup Node.js with pnpm cache'
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 20
           cache: 'pnpm'

diff --git a/.github/workflows/build-test-publish-on-push.yml b/.github/workflows/build-test-publish-on-push.yml
@@ -13,23 +13,23 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
           persist-credentials: false
-      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           version: 10
       - name: 'Setup Node.js with pnpm cache'
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 20
           cache: 'pnpm'
 
       - run: pnpm install
       - run: pnpm build
       - name: 'Save build output'
-        uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: '${{ github.workspace }}'
           key: '${{ runner.os }}-build-${{ github.sha }}-${{ github.run_id }}'
@@ -42,26 +42,26 @@ jobs:
         shard: [ 1, 2, 3, 4, 5 ]
     services:
       postgres:
-        image: postgres:16.0
+        image: postgres:16.14
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: test123
         ports:
           - 5432:5432
         options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
     steps:
-      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           version: 10
       - name: 'Restore build output'
-        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: '${{ github.workspace }}'
           key: '${{ runner.os }}-build-${{ github.sha }}-${{ github.run_id }}'
           restore-keys: '${{ runner.os }}-build-${{ github.sha }}'
           fail-on-cache-miss: true
       - name: 'Setup Node.js with pnpm cache'
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 20
           cache: 'pnpm'
@@ -85,7 +85,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [ test-integration ]
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -96,7 +96,7 @@ jobs:
           path: coverage
       - name: Merge Code Coverage
         run: npx nyc merge coverage/ coverage/coverage-final.json
-      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+      - uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5.5.5
         with:
           token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos but sometimes fails without :|
           fail_ci_if_error: false
@@ -105,18 +105,18 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           version: 10
       - name: 'Restore build output'
-        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: '${{ github.workspace }}'
           key: '${{ runner.os }}-build-${{ github.sha }}-${{ github.run_id }}'
           restore-keys: '${{ runner.os }}-build-${{ github.sha }}'
           fail-on-cache-miss: true
       - name: 'Setup Node.js with pnpm cache'
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 20
           cache: 'pnpm'
@@ -129,18 +129,18 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           version: 10
       - name: 'Restore build output'
-        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: '${{ github.workspace }}'
           key: '${{ runner.os }}-build-${{ github.sha }}-${{ github.run_id }}'
           restore-keys: '${{ runner.os }}-build-${{ github.sha }}'
           fail-on-cache-miss: true
       - name: 'Setup Node.js with pnpm cache'
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 20
           cache: 'pnpm'
@@ -164,21 +164,21 @@ jobs:
       GH_EMAIL: ${{secrets.GH_EMAIL}}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
           token: ${{secrets.GH_TOKEN}}
-      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           version: 10
       - name: 'Setup Node.js with pnpm cache'
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 20
           cache: 'pnpm'
 
       - name: 'Restore build output'
-        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: '${{ github.workspace }}'
           key: '${{ runner.os }}-build-${{ github.sha }}-${{ github.run_id }}'

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
 
@@ -73,6 +73,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
+        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           sarif_file: results.sarif
diff --git a/package.json b/package.json
@@ -28,20 +28,20 @@
   },
   "devDependencies": {
     "@jest/globals": "29.7.0",
-    "@metamask/eth-sig-util": "7.0.1",
+    "@metamask/eth-sig-util": "7.0.3",
     "@microsoft/api-documenter": "7.26.5",
     "@microsoft/api-extractor": "7.49.1",
     "@microsoft/api-extractor-model": "7.30.2",
     "@microsoft/tsdoc": "0.15.0",
     "@noble/hashes": "1.7.1",
     "@stablelib/ed25519": "1.0.3",
     "@transmute/credentials-context": "0.7.0-unstable.82",
-    "@types/express": "4.17.21",
+    "@types/express": "4.17.25",
     "@types/fs-extra": "11.0.4",
-    "@types/jest": "29.5.12",
+    "@types/jest": "29.5.14",
     "@types/node": "20.17.4",
     "@types/uuid": "9.0.8",
-    "caip": "1.1.0",
+    "caip": "1.1.1",
     "credential-status": "3.0.4",
     "cross-env": "7.0.3",
     "did-jwt": "8.0.8",
@@ -58,18 +58,18 @@
     "json-schema": "0.4.0",
     "lerna": "8.1.2",
     "lerna-changelog": "2.2.0",
-    "nock": "14.0.10",
+    "nock": "14.0.15",
     "openapi-types": "12.1.3",
     "prettier": "3.4.2",
-    "rimraf": "5.0.5",
+    "rimraf": "5.0.10",
     "semantic-release": "23.1.1",
     "sqlite3": "5.1.7",
-    "ts-jest": "29.4.1",
-    "ts-json-schema-generator": "1.5.0",
+    "ts-jest": "29.4.11",
+    "ts-json-schema-generator": "1.5.1",
     "ts-node": "10.9.2",
-    "typeorm": "0.3.20",
+    "typeorm": "0.3.30",
     "typescript": "5.7.3",
-    "uint8arrays": "5.1.0",
+    "uint8arrays": "5.1.1",
     "uuid": "9.0.1",
     "web-did-resolver": "2.0.29"
   },

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -100,14 +100,14 @@
     "yaml": "^2.3.4"
   },
   "devDependencies": {
-    "@types/debug": "4.1.8",
-    "@types/express": "4.17.17",
-    "@types/inquirer": "9.0.3",
-    "@types/inquirer-autocomplete-prompt": "3.0.0",
+    "@types/debug": "4.1.13",
+    "@types/express": "4.17.25",
+    "@types/inquirer": "9.0.10",
+    "@types/inquirer-autocomplete-prompt": "3.0.3",
     "@types/node-fetch": "3.0.3",
-    "@types/passport-http-bearer": "1.0.37",
-    "@types/qrcode-terminal": "0.12.0",
-    "@types/url-parse": "1.4.8",
+    "@types/passport-http-bearer": "1.0.42",
+    "@types/qrcode-terminal": "0.12.2",
+    "@types/url-parse": "1.4.11",
     "@types/ws": "8.5.5",
     "typescript": "5.7.3"
   },

diff --git a/packages/core-types/package.json b/packages/core-types/package.json
@@ -38,7 +38,7 @@
     "did-resolver": "^4.1.0"
   },
   "devDependencies": {
-    "@types/debug": "4.1.8",
+    "@types/debug": "4.1.13",
     "typescript": "5.7.3"
   },
   "files": [

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -18,8 +18,8 @@
     "z-schema": "^6.0.1"
   },
   "devDependencies": {
-    "@types/debug": "4.1.8",
-    "@types/events": "3.0.0",
+    "@types/debug": "4.1.13",
+    "@types/events": "3.0.3",
     "typescript": "5.7.3"
   },
   "files": [

diff --git a/packages/credential-eip712/package.json b/packages/credential-eip712/package.json
@@ -20,7 +20,7 @@
     "eip-712-types-generation": "^0.1.6"
   },
   "devDependencies": {
-    "@types/debug": "4.1.8",
+    "@types/debug": "4.1.13",
     "typescript": "5.7.3"
   },
   "files": [

diff --git a/packages/credential-jwt/package.json b/packages/credential-jwt/package.json
@@ -20,7 +20,7 @@
     "did-jwt-vc": "^4.0.0"
   },
   "devDependencies": {
-    "@types/debug": "4.1.8",
+    "@types/debug": "4.1.13",
     "typescript": "5.7.3"
   },
   "files": [