0.9.1

.github/workflows/java11-push.yml → .github/workflows/codacy-coverage.yml

@@ -1,9 +1,7 @@
 # This workflow will build a Java project with Maven
 # For more information see: https://help.github.com/actions/language-and-framework-guides/building-and-testing-java-with-maven
 
-name: Java 11 CI
-permissions:
-  contents: read
+name: Codacy Coverage
 
 on:
   push:
@@ -16,12 +14,13 @@ jobs:
 
     steps:
     - uses: actions/checkout@v4
-    - name: Set up JDK 11
-      uses: actions/setup-java@v1
+    - name: Set up JDK 8
+      uses: actions/setup-java@v4
       with:
-        java-version: 11
+        java-version: 8
+        distribution: 'temurin'
     - name: Build with Maven
-      run: mvn -B package jacoco:report --file pom.xml
+      run: mvn -B package jacoco:report 
     - name: Run codacy-coverage-reporter
       uses: codacy/codacy-coverage-reporter-action@master
       with:

.github/workflows/codeql.yml

@@ -0,0 +1,49 @@
+name: "CodeQL Advanced"
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+  schedule:
+    - cron: '39 16 * * 4'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - language: java
+            build-mode: none
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: ${{ matrix.language }}
+        build-mode: ${{ matrix.build-mode }}
+
+    - name: Set up JDK 8
+      uses: actions/setup-java@v4
+      with:
+        java-version: 8
+        distribution: 'temurin'
+    - name: Build with Maven
+      run: mvn -B package
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:${{matrix.language}}"      

.github/workflows/java11-build.yml → .github/workflows/java8-build.yml

@@ -1,10 +1,7 @@
 # This workflow will build a Java project with Maven
 # For more information see: https://help.github.com/actions/language-and-framework-guides/building-and-testing-java-with-maven
 
-name: Java 11 PR
-
-permissions:
-  contents: read
+name: Java 8 CI
 
 on:
   pull_request:
@@ -16,10 +13,11 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
-    - name: Set up JDK 11
-      uses: actions/setup-java@v1
+    - uses: actions/checkout@v4
+    - name: Set up JDK 8
+      uses: actions/setup-java@v4
       with:
-        java-version: 11
+        java-version: 8
+        distribution: 'temurin'
     - name: Build with Maven
-      run: mvn -f pom.xml package
+      run: mvn package 

.github/workflows/java8-publish.yml

@@ -0,0 +1,30 @@
+name: Publish JRE17 to the Maven Central
+on:
+  release:
+    types: [created]
+
+  workflow_dispatch:
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    environment: maven-central
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: 'maven'
+          server-id: ossrh
+          server-username: OSSRH_USERNAME
+          server-password: OSSRH_TOKEN
+          gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
+      - name: Publish package
+        run: mvn -B -Pmaven-central deploy
+        env:
+          OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+          OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}

README.md

@@ -1,54 +1,28 @@
+# Carbon Decentralized Identifiers
 
-> [!IMPORTANT]
-> Your feedback is essential to the improvement of this library. Please share any concerns, primary use cases, areas for enhancement, or challenges you have encountered. Your insights help refine and optimize the library to better meet user needs. Thank you for your time and contributions.
-
-# Carbon DID
 An implementation of the [Decentralized Identifiers (DIDs) v1.0](https://www.w3.org/TR/did-core/) in Java.
 
-
-[![Java 11 CI](https://github.com/filip26/carbon-decentralized-identifiers/actions/workflows/java11-push.yml/badge.svg)](https://github.com/filip26/carbon-decentralized-identifiers/actions/workflows/java11-push.yml)
-[![Codacy Badge](https://app.codacy.com/project/badge/Grade/dd79aafc6eb14ed18f2217de62585ba7)](https://app.codacy.com/gh/filip26/carbon-decentralized-identifiers/dashboard?utm_source=gh&utm_medium=referral&utm_content=&utm_campaign=Badge_grade)
-[![Codacy Badge](https://app.codacy.com/project/badge/Coverage/dd79aafc6eb14ed18f2217de62585ba7)](https://app.codacy.com/gh/filip26/carbon-decentralized-identifiers/dashboard?utm_source=gh&utm_medium=referral&utm_content=&utm_campaign=Badge_coverage)
+[![Java 8 CI](https://github.com/filip26/carbon-did-core/actions/workflows/java8-build.yml/badge.svg)](https://github.com/filip26/carbon-did-core/actions/workflows/java8-build.yml)
+[![Codacy Badge](https://app.codacy.com/project/badge/Grade/dd79aafc6eb14ed18f2217de62585ba7)](https://app.codacy.com/gh/filip26/carbon-did-core/dashboard?utm_source=gh&utm_medium=referral&utm_content=&utm_campaign=Badge_grade)
 [![Maven Central](https://img.shields.io/maven-central/v/com.apicatalog/carbon-did.svg?label=Maven%20Central)](https://search.maven.org/search?q=g:com.apicatalog%20AND%20a:carbon-did)
 [![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 
-
 ## Features
 
-* DID, DID URL, DID Document
-* Methods
-  * [did:key method v0.7](https://w3c-ccg.github.io/did-method-key/)
+* DID, DID URL primitives
+* DID Document API & primitives
+* DID Resolver API
+  * [`did:key`](https://github.com/filip26/carbon-did-key) method
 
 ## Installation
 
-### Carbon DID
-
-#### Maven
+### Maven
 
 ```xml
 <dependency>
     <groupId>com.apicatalog</groupId>
     <artifactId>carbon-did</artifactId>
-    <version>0.6.0</version>
-</dependency>
-<dependency>
-    <groupId>com.apicatalog</groupId>
-    <artifactId>copper-multibase</artifactId>
-    <version>0.5.0</version>
-</dependency>
-```
-
-### JSON-P Provider
-
-Add JSON-P provider, if it is not on the classpath already.
-
-#### Maven
-
-```xml
-<dependency>
-    <groupId>org.glassfish</groupId>
-    <artifactId>jakarta.json</artifactId>
-    <version>2.0.1</version>
+    <version>0.9.1</version>
 </dependency>
 ```
 
@@ -66,17 +40,18 @@ All PR's welcome!
 
 Fork and clone the project repository.
 
-#### Java 11+
+#### Java 1.8
 ```bash
-> cd carbon-decentralized-identifiers
+> cd carbon-did-core
 > mvn clean package
 ```
 
-## Resources- 
-- [Decentralized Identifiers (DIDs) v1.0](https://www.w3.org/TR/did-core/)
-- [The did:key Method v0.7](https://w3c-ccg.github.io/did-method-key/)
-- [Copper Multicodec](https://github.com/filip26/copper-multicodec)
-- [Copper Multibase](https://github.com/filip26/copper-multibase)
+## Resources
+
+- [W3C Decentralized Identifiers (DIDs) v1.0](https://www.w3.org/TR/did-core/)
+- [W3C Controlled Identifiers v1.0](https://www.w3.org/TR/cid-1.0/)
+- [Carbon DID Key Method](https://github.com/filip26/carbon-did-key)
+- [Carbon Controlled Identifiers](https://github.com/filip26/carbon-cid)
 
 ## Sponsors
 
@@ -86,4 +61,3 @@ Fork and clone the project repository.
 
 ## Commercial Support
 Commercial support is available at filip26@gmail.com
-

SECURITY.md

@@ -2,10 +2,16 @@
 
 ## Supported Versions
 
-| Version | Supported          |
-| ------- |:------------------:|
-| 0.x.x   | ❌ |
+| Version | Supported |
+| ------- |:---------:|
+| 0.x.x   | ✅ Supported |
+| 1.x.x   | ❌ Not supported |
 
 ## Reporting a Vulnerability
 
-Please report security vulnerabilities to [Filip Kolarik](mailto:filip26@gmail.com). Thank you!
+If you discover a security vulnerability, please report it responsibly by contacting:  
+
+**Filip Kolarik**  
+📧 [filip26@gmail.com](mailto:filip26@gmail.com)
+
+We will investigate promptly and work with you to address the issue. Thank you for helping keep the project secure!