Cicero Versions Save

Updates Ergo, Concerto and Markdown transform. Addresses a security vulnerability in vm2, used by Ergo.

What's Changed

• docs: update invite link - #738 by @K-Kumar-01 in https://github.com/accordproject/cicero/pull/739
• docs(cicero-server/README.md): update curl requests - #742 by @K-Kumar-01 in https://github.com/accordproject/cicero/pull/743
• chore(actions): publish v0.23.0 to npm by @github-actions in https://github.com/accordproject/cicero/pull/737
• test(core): metadata test by @mttrbrts in https://github.com/accordproject/cicero/pull/753
• feat(server) Add new /invoke/:template endpoint implementation by @mehmettokgoz in https://github.com/accordproject/cicero/pull/746
• feat(server) Add new /initialize/:template endpoint implementation by @mehmettokgoz in https://github.com/accordproject/cicero/pull/747
• fix(server) Replace bitwise OR operator with logical OR for CICERO_PORT setting. by @mehmettokgoz in https://github.com/accordproject/cicero/pull/754
• feat(server) Add new /normalize/:template endpoint implementation by @mehmettokgoz in https://github.com/accordproject/cicero/pull/748
• chore(deps): bump yargs-parser from 9.0.2 to 20.2.4 by @dependabot in https://github.com/accordproject/cicero/pull/733
• chore(deps): bump lodash.template from 3.6.2 to 4.5.0 by @dependabot in https://github.com/accordproject/cicero/pull/732
• feat(server) Add new /compile/:template endpoint implementation by @mehmettokgoz in https://github.com/accordproject/cicero/pull/749
• chore(ergo) : bump ergo version by @dselman in https://github.com/accordproject/cicero/pull/757

New Contributors

• @K-Kumar-01 made their first contribution in https://github.com/accordproject/cicero/pull/739
• @mehmettokgoz made their first contribution in https://github.com/accordproject/cicero/pull/746

Full Changelog: https://github.com/accordproject/cicero/compare/v0.23.0...v0.24.0

Updates to Concerto v2.0.0, Ergo v0.23.1 and Markdown Transform v0.15.1

This release upgrades to the latest major version of Concerto 2.0.0 and updates numerous dependencies.

💥 Breaking Changes

• Cicero libraries now require Node.js version 14 or later. Node.js version 12 is no longer supported

🛡️Dependencies Updates

• Upgrades to Concerto 2.0.0
• Upgrades to Ergo backend to Q*cert 2.1.1
• Upgrades numerous dependencies, fixing vulnerabilities

🖊️ 🔐 This release features the ability for template authors to sign their templates, along with the ability for users to verify that the template has not been tempered with since it's been created. (Contributor: @sanketshevkar)

It also include bug fixes and addresses known vulnerabilities in dependencies.

🛡️Dependencies Updates

• Upgrades to Concerto 1.2.1
• Upgrade to Markdown Transform 0.14.1
• Upgrades to Ergo 0.22.2
• Upgrades various dependencies, fixing vulnerabilities

🐛 Bug Fixes

• https://github.com/accordproject/markdown-transform/issues/345 Fixes issues with {{this}} variables with a format
• https://github.com/accordproject/markdown-transform/issues/419 https://github.com/accordproject/markdown-transform/issues/431 Fixes issues with latest versions of pdfjs library
• https://github.com/accordproject/markdown-transform/issues/448 Fixes issues with pdf generation for emphasis and bold
• https://github.com/accordproject/markdown-transform/issues/392 Fixes issues with pdf generation for optional and conditional blocks

🛰 CLI

• cicero archive --keystore <keystore> --passphrase <passphrase> adds a signature based on the given author's public/private key when creating a template archive
• cicero verify verifies that an archive is consistent with the contained signature

This release upgrades Concerto to the latest version 1.0.2, which addresses security vulnerabilities.

🏗 Dependencies

• Upgrades to Concerto 1.0.2
• Upgrades to Ergo 0.22.1

Imp Release 😈

Cicero 0.22 is a major release which uses Concerto 1.0 and a completely redesigned Ergo compiler.

Changes

• New Concerto 1.0 data modelling library. See release notes
• New Ergo compiler: See release notes
• Switch DateTime support from moment to dayjs: See why

New Features

• Now supports private template libraries #632 (Contribution @Cronus1007 and @mttrbrts)
• Now allow parameters on Clause initialisation #604

API

• Additional utcOffset parameter can be passed to Cicero engine

Tech notes:

• BREAKING The Ergo compiler no longer generates ES5, but ES6 (notably the generated code uses let)

This release updates dependencies, upgrading Concerto, Ergo and the Markdown Transform libraries.

This release adds two options --offline and --utcOffset to the command line. It also upgrades to the latest Concerto, Markdown Transform and Ergo packages.

This alpha release fixes issues with external models resolution.

This new alpha release provides several improvements:

• More efficient external model loading
• Dependencies upgrades, including fixes to vulnerabilities
• A revised ergo compiler and engine API