Repository navigation
Dependencies: @x402/* 2.29.0 and zod 4; Algorand by its CAIP-2 id - #69
Merged
Merged
Conversation
@x402/core, evm, extensions 2.29.0 depend on zod ^4.6.6 (GHSA-mrhx-c7xc-m3w5 fixed); the service's own zod goes to ^4.6.7. npm audit fix (no --force) also takes body-parser, follow-redirects and the MCP SDK to fixed versions within their ranges. npm audit --omit=dev: high 14 -> 4; what stays is zod 3 through @coinbase/x402 -> @coinbase/cdp-sdk (coinbase/cdp-sdk#863). What 2.29.0 changes for us: - @x402/svm needs @solana/kit 8 as a peer: added at the root. - @x402/avm accepts Algorand only as algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73k (the whole genesis hash is refused, and Coinbase's validator rejects a 402 that offers it since 29 Oct). The paid routes now offer the short id; GoPlausible's facilitator supports both. The usage log names both "algorand". The same change as x402-doctor#438, presign-guard#231 and ichimoku-signal#184. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TsD5haPKxeWjYmErHzvU48
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
PlainText comes back on 1 Nov, when the free Render hours reset. Its 402 still offers Algorand as the whole genesis hash,
algorand:wGHE2…kit8=. Since 29 Oct, Coinbase's validator rejects any 402 that offers that form:must be in CAIP-2 format. That happened to the other three services overnight until x402-doctor#438, presign-guard#231 and ichimoku-signal#184 fixed it. This PR makes the same change here, so PlainText comes back valid.What
@x402/*→^2.29.0; the service's ownzod→^4.6.7.@solana/kit^8.6.0at the root, because@x402/svm2.29 needs kit 8 as a peer.algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73k. GoPlausible's facilitator supports both forms, and the usage log names bothalgorand.npm audit fix(without--force) moves body-parser, follow-redirects and the MCP SDK to fixed versions within their ranges.npm audit --omit=dev: high 14 → 4. What remains is zod 3 through@coinbase/x402→@coinbase/cdp-sdk(coinbase/cdp-sdk#863).Checks
npm test: 37/37 pass, including the Algorand payment test with the short id.PlainText is paused until 1 Nov, so this deploy has no effect until it wakes up. It can be merged any time before then.
Generated by Claude Code