fix: update Bootproof pins for ES384 attestation verification #19

Manually merged

anton merged 1 commit from fix/bump-bootproof-es384 into main

2026-10-21 19:39:28 +00:00

anton commented

2026-10-21 18:32:37 +00:00

Owner

Summary

Update bootproof and bootproof-sdk from 78f531a2c245404a9d8879fb71cc397096ae0077 to b346db17523ad9b13ef41eb9c14df3328bbd80d1, including the ES384 DER fix for valid Nitro signatures with padded positive integers.
Rebased onto merged source migration #16. Preserve https://git.caution.co/public/bootproof.git and all other migration changes.
One commit; three files, four replaced lines (+4/-4; net 0). No new tests, runtime source edits, or unrelated dependency changes.

Verification

Fresh checks on 7e2e661c3c5a1a942dbd036a69bf6f4ba34a5d9d, based on main 66d9bc77e131b6e60336b7bf940678715daa41af. Rust 1.96.0; host CARGO_TARGET_DIR=/home/tuna/git/steve/target; Node 22.

npm --prefix steve-js-sdk ci --ignore-scripts — passed; lockfile unchanged.
make -j2 test — 144 Rust passed, 2 existing ignored; 103 JavaScript passed, 0 failed.
cargo test --locked --workspace --all-targets --all-features — 144 passed, 2 existing ignored.
Separate checkout of exact Bootproof pin: cargo test --locked --package bootproof-sdk --lib — 11 passed, 0 ignored, including the DER padding regression.
docker build --file Containerfile --tag local/steve:bootproof-rebase-7e2e661 . — passed with the checked-in pinned StageX builder and release musl target.
cargo metadata --locked --format-version 1 — both Bootproof packages resolve from the canonical forge at the exact new pin; other lock entries unchanged.
git diff --check HEAD^ HEAD and synthetic merge onto the current base — passed.
Independent source review of the exact candidate — approved, no blockers.

Scope

No full browser/Swift E2E or live Nitro tests were run. Platform's STEVE selection and separate bootproofd pin are unchanged. Nothing has been merged or deployed.

## Summary - Update `bootproof` and `bootproof-sdk` from `78f531a2c245404a9d8879fb71cc397096ae0077` to `b346db17523ad9b13ef41eb9c14df3328bbd80d1`, including the ES384 DER fix for valid Nitro signatures with padded positive integers. - Rebased onto merged source migration #16. Preserve `https://git.caution.co/public/bootproof.git` and all other migration changes. - One commit; three files, four replaced lines (+4/-4; net 0). No new tests, runtime source edits, or unrelated dependency changes. ## Verification Fresh checks on `7e2e661c3c5a1a942dbd036a69bf6f4ba34a5d9d`, based on main `66d9bc77e131b6e60336b7bf940678715daa41af`. Rust 1.96.0; host `CARGO_TARGET_DIR=/home/tuna/git/steve/target`; Node 22. - `npm --prefix steve-js-sdk ci --ignore-scripts` — passed; lockfile unchanged. - `make -j2 test` — 144 Rust passed, 2 existing ignored; 103 JavaScript passed, 0 failed. - `cargo test --locked --workspace --all-targets --all-features` — 144 passed, 2 existing ignored. - Separate checkout of exact Bootproof pin: `cargo test --locked --package bootproof-sdk --lib` — 11 passed, 0 ignored, including the DER padding regression. - `docker build --file Containerfile --tag local/steve:bootproof-rebase-7e2e661 .` — passed with the checked-in pinned StageX builder and release musl target. - `cargo metadata --locked --format-version 1` — both Bootproof packages resolve from the canonical forge at the exact new pin; other lock entries unchanged. - `git diff --check HEAD^ HEAD` and synthetic merge onto the current base — passed. - Independent source review of the exact candidate — approved, no blockers. ## Scope No full browser/Swift E2E or live Nitro tests were run. Platform's STEVE selection and separate `bootproofd` pin are unchanged. Nothing has been merged or deployed.

anton added 1 commit

2026-10-21 18:32:37 +00:00