v0.3.0
Release Information
- Version: 0.3.0
- Release Date: Oct 2, 2025
- GitHub: https://github.com/originator-profile/originator-profile/releases/tag/v0.3.0
Key changes
Improved consistency of the publication URL restriction property https://github.com/originator-profile/profile-share/issues/70
- Unified restrictions on CA posting locations to
allowedUrlURL Pattern - Initially, two properties were prepared:
allowedOriginandallowedUrl, but now that the type ofallowedUrlis compatible with the URL Pattern specification, it is no longer necessary to specify it in a separate property for Origin.
Changing the url property of the Website Profile
- Change the WSP credentialSubject
urltoallowedOrigin.- Since the same "site" may be deployed across multiple origins (e.g., differing by http/https),
allowedOrigincan be specified as an array of multiple origins. - It can also be used in development environments for testing and branch deployments.
- Since the same "site" may be deployed across multiple origins (e.g., differing by http/https),
Change to the structure of the Web Media Profile description property https://github.com/originator-profile/profile-share/issues/83
- Standardized the structure of the
descriptionproperty—previously a mix of objects with{ type, data }properties and strings—to a singlestringtype.
Terminology Change (Target Integrity ⇒ Content Integrity Descriptor)
- Renaming of the former Target Integrity specification (documentation only)
✅ New Features Added
- Added dependency injection support for the fetcher function - Updated
signandverifyfunctions to allow injection of a fetcher function - Enhanced demo pages - Added features to the OPS and CAS demo pages for access and verification
- Improved
WebMediaProfiletype - Changed thedescriptionproperty type tostring WebsiteProfileAPI change - Replaced theurlproperty withallowedOrigin(BREAKING CHANGE)- WordPress plugin enhancement - Added functionality to embed stored CAS as a link
🛠️ Fixes
- WordPress Plugin CA Manager Vulnerability Fix - Fixed a security vulnerability
- Build Configuration Fix - Adjusted
package.jsonfor publishing to enable builds - web-ext E2E Test Fix - Fixed E2E tests to ensure they pass
- Dependency Update - Updated all dependencies to the latest versions
🔥 Deletion & Abolition
- BREAKING CHANGE: Replaced the
urlproperty ofWebsiteProfilewithallowedOrigin.- From October 1, 2026 onward, it will no longer be possible to verify VCs that use the
urlproperty of WebsiteProfile. Please consider migrating.
- From October 1, 2026 onward, it will no longer be possible to verify VCs that use the
🧪 Testing & Quality
- E2E test environment improvements - Properly handle settings such as
REGISTRY_OPSduring E2E testing in the CI environment - web-ext E2E test fixes - Improved test stability
📄 Documentation
- WordPress README Synchronization - Synchronized WordPress README from docs.originator-profile.org
- WordPress Configuration Documentation - Added a note regarding CA invalidation when changing permalink settings
- English Demo Page - Created an English version of the demo page to support internationalization
- Multiple OPS/CAS Demo - Added a demo page featuring multiple OPS and CAS instances
- PR Template and Copilot Instructions - Improved the development process
📦 Build, CI/CD, and Dependency Management
- Added Beta Release Feature - Added beta release option
- Improved Release Strategy - Perform pre-minor releases only on the
mainbranch - Enhanced Build Environment - Made build parameters mandatory in the CI environment
- Improved demo-page Build - Explicitly specified the package version
opvcMigration - Migrated from tsup to tsdown- Added Claude Code GitHub Workflow - Added CI/CD pipeline
Download
Download the files from the "Assets" section below.
- Extension (Google Chrome): profile_web_extension-chromium-0.3.0.zip
- Extension (Firefox): profile_web_extension-firefox-desktop-0.3.0.zip
- WordPress Plugin: wordpress-ca-manager.zip
Please refer to the following documentation for installation instructions.