Skip to content

Conversation

@andrewkmin
Copy link
Contributor

@andrewkmin andrewkmin commented Nov 20, 2025

TLDR: $title

Longer:

We're updating hpke (hard-pinned to 1.7.5). Because more recent versions of hpke use a bifurcated dependency import flow (see https://esm.sh/@hpke/core@1.2.7 vs https://esm.sh/@hpke/core@1.7.5), we figured it's a good time to move builds to use webpack.

In doing so, there are several changes:

  • separate JS functionality into a few files:
    • index.js (for actually served iframe -- event handlers, etc)
    • standalone.js (for standalone page surfaced at /standalone.html)
    • turnkey-core.js (core logic, cryptography, etc)

What we're maintaining:

  • existing functionality
  • standalone site
  • existing styles
  • test functionality (retooled because some functions are no longer static)

What's not covered:

  • TypeScript migration
  • other non-webpack-ified iframes (for now)
  • functionality-related improvements (for now)

@socket-security
Copy link

socket-security bot commented Nov 20, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedcopy-webpack-plugin@​11.0.09910010084100

View full report

@andrewkmin andrewkmin changed the title Andrew/import hpke update hpke and webpack-ify import iframe Nov 21, 2025
@andrewkmin andrewkmin changed the title update hpke and webpack-ify import iframe webpack-ify import iframe and update hpke Nov 21, 2025
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
- name: Login to GHCR
if: github.event_name != 'pull_request'
# if: github.event_name != 'pull_request'
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TODO: before merge, update and remove.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What's the reason why you had to comment this out?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oh. I see. To publish the container, to test it.

@andrewkmin andrewkmin marked this pull request as ready for review November 21, 2025 16:39
ngmihodl
ngmihodl previously approved these changes Nov 21, 2025
Comment on lines +202 to +226
If testing in a live, non-local environment, you can point containers to a new image as follows:

```
# Update containers (main + init) to new image
kubectl --context <context> -n tkhq-frames set image deployment/frames \
frames=ghcr.io/tkhq/frames@sha256:<digest> \
template-quorum-key=ghcr.io/tkhq/frames@sha256:<digest>
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👏

Copy link
Collaborator

@r-n-o r-n-o left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

very nice! The only thing left to do is revert the Github workflow to what it was so we don't publish on PRs; otherwise looks great! 🥇

r-n-o
r-n-o previously approved these changes Nov 25, 2025
@andrewkmin andrewkmin force-pushed the andrew/import-hpke branch 3 times, most recently from 6139894 to 4fdd8da Compare November 25, 2025 22:57
@andrewkmin andrewkmin force-pushed the andrew/import-hpke branch 2 times, most recently from 2d9c351 to 2d3a183 Compare November 25, 2025 23:02
@andrewkmin andrewkmin requested review from ngmihodl and r-n-o November 26, 2025 00:08
r-n-o
r-n-o previously approved these changes Nov 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants