Skip to content

[pull] develop from smartcontractkit:develop#350

Merged
pull[bot] merged 3 commits intobit-cook:developfrom
smartcontractkit:develop
May 7, 2026
Merged

[pull] develop from smartcontractkit:develop#350
pull[bot] merged 3 commits intobit-cook:developfrom
smartcontractkit:develop

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented May 7, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

russell-stern and others added 3 commits May 6, 2026 18:36
* Added extra validation in gateway and validate observation

* Fixed linting issue

* Added validation for get secrets requests through execute

* Fixed linter errors

* Switched smoke test syntax
* fix(vault): enforce JWT OAuth scope per JSON-RPC method

Reject Vault JWT auth when scope/permissions do not match the requested
method (create/update/delete/list secrets). Keeps digest binding as
integrity control. Aligns with CRE OAuth scopes used by GraphQL.

Updates system-test JWT minting to include the correct scope per method.

Co-authored-by: Cursor <cursoragent@cursor.com>

* lint

* fix(vault): require single Vault OAuth scope; add scope mapper tests

Enforce exactly one known Vault secret scope per token (ignore non-Vault
claims). Add OAuthScopeForVaultRPCMethod unit tests and JWT auth tests
for multi-scope and openid+vault cases.

Co-authored-by: Cursor <cursoragent@cursor.com>

* lint

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
* Updated cl-evm dependency

* Bumped cl-evm and cl-solana dependencies

* add feebost docs

* generate docs

---------

Co-authored-by: Augustus Chang <augustus.chang@smartcontract.com>
@pull pull Bot locked and limited conversation to collaborators May 7, 2026
@pull pull Bot added the ⤵️ pull label May 7, 2026
@pull pull Bot merged commit d14b0fe into bit-cook:develop May 7, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants