Merge pull request #23 from kommitters/v0.2

Release v0.2.0

.github/workflows/cd.yml

@@ -7,6 +7,9 @@ on:
 env:
   CARGO_TERM_COLOR: always
 
+permissions:
+  contents: read
+
 jobs:
   build_and_test:
     name: Rust project - latest
@@ -16,7 +19,12 @@ jobs:
         toolchain:
           - stable
     steps:
-      - uses: actions/checkout@v3
+      - name: Harden Runner
+        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
+        with:
+          egress-policy: audit
+
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - run: rustup update ${{ matrix.toolchain }} && rustup default ${{ matrix.toolchain }}
       - run: rustup target add wasm32-unknown-unknown
       - name: Contract Build

.github/workflows/ci.yml

@@ -20,7 +20,22 @@ jobs:
         toolchain:
           - stable
     steps:
-      - uses: actions/checkout@v3
+      - name: Harden Runner
+        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
+        with:
+          disable-sudo: true
+          egress-policy: block
+          allowed-endpoints: >
+            api.github.com:443
+            coveralls.io:443
+            crates.io:443
+            github.com:443
+            index.crates.io:443
+            objects.githubusercontent.com:443
+            static.crates.io:443
+            static.rust-lang.org:443
+
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - run: rustup update ${{ matrix.toolchain }} && rustup default ${{ matrix.toolchain }}
       - run: rustup target add wasm32-unknown-unknown
       - name: Contract Build
@@ -33,12 +48,12 @@ jobs:
         run: |
           cargo fmt --check
       - name: Code Tests and coverage
-        uses: actions-rs/tarpaulin@v0.1
+        uses: actions-rs/tarpaulin@044a1e5bdace8dd2f727b1af63c1d9a1d3572068 # v0.1.3
         with:
           version: 0.22.0
-          args: --all-features --fail-under 99.0 --out Lcov
+          args: --all-features --fail-under 98.0 --out Lcov
       - name: Upload to Coveralls
-        uses: coverallsapp/github-action@master
+        uses: coverallsapp/github-action@09b709cf6a16e30b0808ba050c7a6e8a5ef13f8d # master
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           path-to-lcov: "./lcov.info"

CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.2.0 (05.12.2023)
+- [Implement DID Document Structure and update storage](https://github.com/kommitters/soroban-did-contract/issues/20)
+- [Update README file](https://github.com/kommitters/soroban-did-contract/pull/17)
+- [[StepSecurity] Apply security best practices](https://github.com/kommitters/soroban-did-contract/pull/21)
+
 ## 0.1.0 (16.11.2023)
 - [Allow getting DID attributes](https://github.com/kommitters/soroban-did-contract/issues/10)
 - [Allow setting DID attributes](https://github.com/kommitters/soroban-did-contract/issues/9)

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "soroban-did-contract"
-version = "0.1.0"
+version = "0.2.0"
 edition = "2021"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
@@ -9,10 +9,10 @@ edition = "2021"
 crate-type = ["cdylib"]
 
 [dependencies]
-soroban-sdk = "20.0.0-rc2"
+soroban-sdk = "=20.0.0-rc2.2"
 
 [dev_dependencies]
-soroban-sdk = { version = "20.0.0-rc2", features = ["testutils"] }
+soroban-sdk = { version = "=20.0.0-rc2.2", features = ["testutils"] }
 
 [profile.release]
 opt-level = "z"