Skip to main content

v0.3.0

Release Information


Key changes

Improved consistency of the publication URL restriction property https://github.com/originator-profile/profile-share/issues/70

  • Unified restrictions on CA posting locations to allowedUrl URL Pattern
  • Initially, two properties were prepared: allowedOrigin and allowedUrl, but now that the type of allowedUrl is compatible with the URL Pattern specification, it is no longer necessary to specify it in a separate property for Origin.

Changing the url property of the Website Profile

  • Change the WSP credentialSubject url to allowedOrigin.
    • Since the same "site" may be deployed across multiple origins (e.g., differing by http/https), allowedOrigin can be specified as an array of multiple origins.
    • It can also be used in development environments for testing and branch deployments.

Change to the structure of the Web Media Profile description property https://github.com/originator-profile/profile-share/issues/83

  • Standardized the structure of the description property—previously a mix of objects with { type, data } properties and strings—to a single string type.

Terminology Change (Target Integrity ⇒ Content Integrity Descriptor)

  • Renaming of the former Target Integrity specification (documentation only)

✅ New Features Added

  • Added dependency injection support for the fetcher function - Updated sign and verify functions to allow injection of a fetcher function
  • Enhanced demo pages - Added features to the OPS and CAS demo pages for access and verification
  • Improved WebMediaProfile type - Changed the description property type to string
  • WebsiteProfile API change - Replaced the url property with allowedOrigin (BREAKING CHANGE)
  • WordPress plugin enhancement - Added functionality to embed stored CAS as a link

🛠️ Fixes

  • WordPress Plugin CA Manager Vulnerability Fix - Fixed a security vulnerability
  • Build Configuration Fix - Adjusted package.json for publishing to enable builds
  • web-ext E2E Test Fix - Fixed E2E tests to ensure they pass
  • Dependency Update - Updated all dependencies to the latest versions

🔥 Deletion & Abolition

  • BREAKING CHANGE: Replaced the url property of WebsiteProfile with allowedOrigin.
    • From October 1, 2026 onward, it will no longer be possible to verify VCs that use the url property of WebsiteProfile. Please consider migrating.

🧪 Testing & Quality

  • E2E test environment improvements - Properly handle settings such as REGISTRY_OPS during E2E testing in the CI environment
  • web-ext E2E test fixes - Improved test stability

📄 Documentation

  • WordPress README Synchronization - Synchronized WordPress README from docs.originator-profile.org
  • WordPress Configuration Documentation - Added a note regarding CA invalidation when changing permalink settings
  • English Demo Page - Created an English version of the demo page to support internationalization
  • Multiple OPS/CAS Demo - Added a demo page featuring multiple OPS and CAS instances
  • PR Template and Copilot Instructions - Improved the development process

📦 Build, CI/CD, and Dependency Management

  • Added Beta Release Feature - Added beta release option
  • Improved Release Strategy - Perform pre-minor releases only on the main branch
  • Enhanced Build Environment - Made build parameters mandatory in the CI environment
  • Improved demo-page Build - Explicitly specified the package version
  • opvc Migration - Migrated from tsup to tsdown
  • Added Claude Code GitHub Workflow - Added CI/CD pipeline

Download

Download the files from the "Assets" section below.

  • Extension (Google Chrome): profile_web_extension-chromium-0.3.0.zip
  • Extension (Firefox): profile_web_extension-firefox-desktop-0.3.0.zip
  • WordPress Plugin: wordpress-ca-manager.zip

Please refer to the following documentation for installation instructions.