Update outdated dependencies (security + patches + minor bumps)

demos/e2e/src/agent.ts

@@ -17,9 +17,8 @@ import {
 } from "agentcommercekit"
 
 import type { CredentialVerifier } from "./credential-verifier"
-import type { ReceiptVerifier } from "./receipt-verifier"
-
 import { PaymentRequiredError } from "./payment-required-error"
+import type { ReceiptVerifier } from "./receipt-verifier"
 import { publicKeyToAddress } from "./utils/evm-address"
 import { verifyAgentIdentityWithCredential } from "./verification"
 

demos/identity-a2a/package.json

@@ -33,6 +33,6 @@
   },
   "devDependencies": {
     "@repo/typescript-config": "workspace:*",
-    "@types/express": "5.0.3"
+    "@types/express": "5.0.6"
   }
 }

demos/identity-a2a/src/agent.ts

@@ -15,7 +15,6 @@ import type {
   Message,
   RequestContext,
 } from "@a2a-js/sdk"
-
 import { colors } from "@repo/cli-tools"
 import {
   createDidDocumentFromKeypair,

demos/identity/src/agent.ts

@@ -1,5 +1,3 @@
-import type { CoreMessage } from "ai"
-
 import { colors } from "@repo/cli-tools"
 import {
   createDidDocumentFromKeypair,
@@ -16,6 +14,7 @@ import {
   type Verifiable,
   type W3CCredential,
 } from "agentcommercekit"
+import type { CoreMessage } from "ai"
 
 import type { CredentialVerifier } from "./credential-verifier"
 

demos/identity/src/index.ts

@@ -1,3 +1,6 @@
+import path, { dirname } from "path"
+import { fileURLToPath } from "url"
+
 import {
   colors,
   confirm,
@@ -18,8 +21,6 @@ import {
   parseJwtCredential,
   type DidUri,
 } from "agentcommercekit"
-import path, { dirname } from "path"
-import { fileURLToPath } from "url"
 
 import { ClientAgent } from "./client-agent"
 import { CredentialIssuer } from "./credential-issuer"

demos/payments/src/constants.ts

@@ -1,5 +1,6 @@
-import { caip2ChainIds } from "agentcommercekit"
 import path from "node:path"
+
+import { caip2ChainIds } from "agentcommercekit"
 import { createPublicClient, http } from "viem"
 import { baseSepolia } from "viem/chains"
 

demos/skyfire-kya/src/index.ts

@@ -1,6 +1,3 @@
-import type { JwtString, Verifiable, W3CCredential } from "agentcommercekit"
-import type * as jose from "jose"
-
 import {
   colors,
   errorMessage,
@@ -9,6 +6,8 @@ import {
   successMessage,
   waitForEnter,
 } from "@repo/cli-tools"
+import type { JwtString, Verifiable, W3CCredential } from "agentcommercekit"
+import type * as jose from "jose"
 
 import { generateJwks } from "./jwk-keys"
 import { createMockSkyfireKyaToken } from "./kya-token"

docs/package.json

@@ -19,7 +19,7 @@
     "docs": "mintlify dev"
   },
   "devDependencies": {
-    "mintlify": "4.2.183"
+    "mintlify": "4.2.377"
   },
   "packageManager": "pnpm@10.20.0"
 }

examples/issuer/bin/start-server.ts

@@ -1,6 +1,7 @@
+import { join } from "node:path"
+
 import { serve } from "@hono/node-server"
 import { migrate } from "drizzle-orm/libsql/migrator"
-import { join } from "node:path"
 
 import { getDb } from "@/db/get-db"
 import app from "@/index"

examples/issuer/package.json

@@ -36,7 +36,7 @@
   },
   "devDependencies": {
     "@repo/typescript-config": "workspace:*",
-    "drizzle-kit": "0.31.1",
+    "drizzle-kit": "0.31.9",
     "vite-tsconfig-paths": "5.1.4"
   }
 }

examples/issuer/src/db/queries/credentials.ts

@@ -9,7 +9,6 @@ import {
 import { getStatusListPosition } from "@/db/utils/get-status-list-position"
 
 import type { DatabaseClient } from "../get-db"
-
 import { maybeCreateStatusList } from "./status-lists"
 
 export async function createCredential(

examples/issuer/src/db/queries/status-lists.ts

@@ -1,7 +1,6 @@
 import { eq } from "drizzle-orm/sql"
 
 import type { DatabaseClient } from "../get-db"
-
 import { statusListsTable, type DatabaseStatusList } from "../schema"
 
 type CreateStatusListParams = Pick<DatabaseStatusList, "id" | "credentialType">

examples/issuer/src/db/schema.ts

@@ -1,5 +1,4 @@
 import type { W3CCredential } from "agentcommercekit"
-
 import { sql } from "drizzle-orm"
 import {
   index,

examples/issuer/src/lib/credentials/build-signed-credential.test.ts

@@ -11,7 +11,6 @@ import { describe, expect, it } from "vitest"
 import type { DatabaseCredential } from "@/db/schema"
 
 import type { Issuer } from "../types"
-
 import { buildSignedCredential } from "./build-signed-credential"
 
 describe("buildSignedCredential", async () => {

examples/issuer/src/lib/credentials/build-signed-credential.ts

@@ -6,7 +6,6 @@ import {
 } from "agentcommercekit"
 
 import type { DatabaseCredential } from "@/db/schema"
-
 import { getStatusListPosition } from "@/db/utils/get-status-list-position"
 
 import type { CredentialResponse, Issuer } from "../types"

examples/issuer/src/middleware/did-resolver.ts

@@ -1,6 +1,5 @@
-import type { Env, MiddlewareHandler } from "hono"
-
 import { getDidResolver, type DidResolver } from "agentcommercekit"
+import type { Env, MiddlewareHandler } from "hono"
 
 declare module "hono" {
   interface ContextVariableMap {

examples/issuer/src/middleware/issuer.ts

@@ -1,11 +1,10 @@
-import type { Env, MiddlewareHandler } from "hono"
-
 import {
   createDidWebDocumentFromKeypair,
   createJwtSigner,
   generateKeypair,
   hexStringToBytes,
 } from "agentcommercekit"
+import type { Env, MiddlewareHandler } from "hono"
 import { env } from "hono/adapter"
 
 import type { Issuer } from "@/lib/types"

examples/issuer/src/routes/credentials.test.ts

@@ -10,9 +10,8 @@ import * as v from "valibot"
 import { afterEach, beforeAll, describe, expect, it, vi } from "vitest"
 
 import type { DatabaseClient } from "@/db/get-db"
-import type { DatabaseCredential } from "@/db/schema"
-
 import { getCredential } from "@/db/queries/credentials"
+import type { DatabaseCredential } from "@/db/schema"
 import {
   createDidWebWithSigner,
   type DidWithSigner,

examples/issuer/src/routes/credentials.ts

@@ -18,14 +18,13 @@ import { Hono, type Env } from "hono"
 import { env } from "hono/adapter"
 import * as v from "valibot"
 
-import type { CredentialResponse } from "@/lib/types"
-
 import {
   createCredential as createDatabaseCredential,
   getCredential,
   revokeCredential,
 } from "@/db/queries/credentials"
 import { buildSignedCredential } from "@/lib/credentials/build-signed-credential"
+import type { CredentialResponse } from "@/lib/types"
 import { database } from "@/middleware/database"
 import { didResolver } from "@/middleware/did-resolver"
 import { issuer } from "@/middleware/issuer"

examples/issuer/src/routes/receipts.test.ts

@@ -17,9 +17,8 @@ import * as v from "valibot"
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest"
 
 import type { DatabaseClient } from "@/db/get-db"
-import type { DatabaseCredential } from "@/db/schema"
-
 import { getCredential } from "@/db/queries/credentials"
+import type { DatabaseCredential } from "@/db/schema"
 import {
   createDidWebWithSigner,
   type DidWithSigner,

examples/issuer/src/routes/receipts.ts

@@ -20,14 +20,13 @@ import { Hono, type Env } from "hono"
 import { env } from "hono/adapter"
 import * as v from "valibot"
 
-import type { CredentialResponse } from "@/lib/types"
-
 import {
   createCredential as createDatabaseCredential,
   getCredential,
   revokeCredential,
 } from "@/db/queries/credentials"
 import { buildSignedCredential } from "@/lib/credentials/build-signed-credential"
+import type { CredentialResponse } from "@/lib/types"
 import { database } from "@/middleware/database"
 import { didResolver } from "@/middleware/did-resolver"
 import { issuer } from "@/middleware/issuer"

examples/issuer/src/routes/well-known.ts

@@ -1,5 +1,4 @@
 import type { DidDocument } from "agentcommercekit"
-
 import { Hono, type Env, type TypedResponse } from "hono"
 
 import { issuer } from "@/middleware/issuer"

examples/local-did-host/src/middleware/identities.ts

@@ -1,5 +1,4 @@
 import type { Env, MiddlewareHandler } from "hono"
-
 import { env } from "hono/adapter"
 
 import { buildUrl } from "@/lib/build-url"

examples/verifier/src/middleware/verifier.ts

@@ -1,5 +1,3 @@
-import type { Env, MiddlewareHandler } from "hono"
-
 import {
   createDidWebDocumentFromKeypair,
   createJwtSigner,
@@ -9,6 +7,7 @@ import {
   type DidUri,
   type JwtSigner,
 } from "agentcommercekit"
+import type { Env, MiddlewareHandler } from "hono"
 import { env } from "hono/adapter"
 
 declare module "hono" {

examples/verifier/src/routes/well-known.ts

@@ -1,5 +1,4 @@
 import type { DidDocument } from "agentcommercekit"
-
 import { Hono, type Env, type TypedResponse } from "hono"
 
 import { verifier } from "@/middleware/verifier"

package.json

@@ -40,19 +40,19 @@
     "test": "turbo test --env-mode=loose"
   },
   "devDependencies": {
-    "@changesets/changelog-github": "0.5.1",
-    "@changesets/cli": "2.29.7",
+    "@changesets/changelog-github": "0.5.2",
+    "@changesets/cli": "2.29.8",
     "@repo/typescript-config": "workspace:*",
     "@types/node": "24.9.2",
     "dotenv-cli": "11.0.0",
-    "oxfmt": "0.32.0",
-    "oxlint": "1.47.0",
-    "oxlint-tsgolint": "0.12.2",
+    "oxfmt": "0.35.0",
+    "oxlint": "1.50.0",
+    "oxlint-tsgolint": "0.14.2",
     "tsdown": "0.15.11",
-    "tsx": "4.20.6",
-    "turbo": "2.5.8",
+    "tsx": "4.21.0",
+    "turbo": "2.8.10",
     "typescript": "5.9.3",
-    "vitest": "4.0.5"
+    "vitest": "4.0.18"
   },
   "engines": {
     "node": ">=22",

packages/ack-id/src/a2a/sign-message.ts

@@ -1,14 +1,13 @@
 import type { Message } from "@a2a-js/sdk"
 import type { DidUri } from "@agentcommercekit/did"
-import type { W3CCredential } from "@agentcommercekit/vc"
-
 import {
   createJwt,
   type JwtAlgorithm,
   type JwtPayload,
   type JwtSigner,
   type JwtString,
 } from "@agentcommercekit/jwt"
+import type { W3CCredential } from "@agentcommercekit/vc"
 import { v4 } from "uuid"
 
 import { generateRandomJti, generateRandomNonce } from "./random"

packages/ack-id/src/a2a/verify.ts

@@ -1,5 +1,4 @@
 import type { Message } from "@a2a-js/sdk"
-
 import {
   getDidResolver,
   type DidResolver,

packages/ack-id/src/controller-credential.ts

@@ -1,5 +1,4 @@
 import type { DidUri } from "@agentcommercekit/did"
-
 import { createCredential, type W3CCredential } from "@agentcommercekit/vc"
 
 type CreateControllerCredentialParams = {

packages/ack-pay/src/create-payment-receipt.test.ts

@@ -3,10 +3,9 @@ import { createJwtSigner, curveToJwtAlgorithm } from "@agentcommercekit/jwt"
 import { generateKeypair } from "@agentcommercekit/keys/ed25519"
 import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest"
 
-import type { PaymentRequestInit } from "./payment-request"
-
 import { createPaymentReceipt } from "./create-payment-receipt"
 import { createSignedPaymentRequest } from "./create-signed-payment-request"
+import type { PaymentRequestInit } from "./payment-request"
 
 describe("createPaymentReceipt", () => {
   const date = new Date("2024-12-31T23:59:59Z")

packages/ack-pay/src/create-payment-receipt.ts

@@ -1,5 +1,4 @@
 import type { DidUri } from "@agentcommercekit/did"
-
 import { createCredential, type W3CCredential } from "@agentcommercekit/vc"
 
 const PAYMENT_RECEIPT_TYPE = "PaymentReceiptCredential"

packages/ack-pay/src/create-payment-request-token.test.ts

@@ -15,9 +15,8 @@ import { generateKeypair, type Keypair } from "@agentcommercekit/keys"
 import * as v from "valibot"
 import { beforeEach, describe, expect, it } from "vitest"
 
-import type { PaymentRequestInit } from "./payment-request"
-
 import { createPaymentRequestToken } from "./create-payment-request-token"
+import type { PaymentRequestInit } from "./payment-request"
 import { paymentRequestSchema } from "./schemas/valibot"
 
 describe("createPaymentRequestToken()", () => {

packages/ack-pay/src/create-payment-request-token.ts

@@ -1,5 +1,4 @@
 import type { DidUri } from "@agentcommercekit/did"
-
 import {
   createJwt,
   type JwtAlgorithm,

packages/ack-pay/src/create-signed-payment-request.test.ts

@@ -13,9 +13,8 @@ import {
 import { generateKeypair, type Keypair } from "@agentcommercekit/keys"
 import { beforeEach, describe, expect, it } from "vitest"
 
-import type { PaymentRequestInit } from "./payment-request"
-
 import { createSignedPaymentRequest } from "./create-signed-payment-request"
+import type { PaymentRequestInit } from "./payment-request"
 import { verifyPaymentRequestToken } from "./verify-payment-request-token"
 
 describe("createSignedPaymentRequest()", () => {

packages/ack-pay/src/create-signed-payment-request.ts

@@ -1,13 +1,11 @@
 import type { JwtString } from "@agentcommercekit/jwt"
-
 import * as v from "valibot"
 
-import type { PaymentRequest, PaymentRequestInit } from "./payment-request"
-
 import {
   createPaymentRequestToken,
   type PaymentRequestTokenOptions,
 } from "./create-payment-request-token"
+import type { PaymentRequest, PaymentRequestInit } from "./payment-request"
 import { paymentRequestSchema } from "./schemas/valibot"
 
 /**

packages/ack-pay/src/verify-payment-receipt.test.ts

@@ -20,11 +20,10 @@ import {
 } from "@agentcommercekit/vc"
 import { beforeEach, describe, expect, it } from "vitest"
 
-import type { PaymentRequestInit } from "./payment-request"
-
 import { createPaymentReceipt } from "./create-payment-receipt"
 import { createSignedPaymentRequest } from "./create-signed-payment-request"
 import { InvalidPaymentRequestTokenError } from "./errors"
+import type { PaymentRequestInit } from "./payment-request"
 import { verifyPaymentReceipt } from "./verify-payment-receipt"
 
 describe("verifyPaymentReceipt()", () => {

packages/ack-pay/src/verify-payment-receipt.ts

@@ -1,5 +1,4 @@
 import type { Resolvable } from "@agentcommercekit/did"
-
 import { isJwtString, type JwtString } from "@agentcommercekit/jwt"
 import {
   InvalidCredentialError,
@@ -12,7 +11,6 @@ import {
 } from "@agentcommercekit/vc"
 
 import type { PaymentRequest } from "./payment-request"
-
 import {
   getReceiptClaimVerifier,
   isPaymentReceiptCredential,