Merge branch 'master' into dependabot/docker/docker/spiffe/spire-agent-1.15.0

Author: ParleSec

.github/workflows/palette-content.yml

@@ -76,7 +76,7 @@ jobs:
           file ./dist/palette.db | grep -q SQLite
 
       - name: Upload palette.db artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: palette-db
           path: backend/dist/palette.db

README.md

@@ -4,12 +4,20 @@ An interactive sandbox for exploring authentication and identity protocols. Exec
 
 > Real flows against real infrastructure
 
-**Protocols:** OAuth 2.0 • OpenID Connect • SAML 2.0 • SPIFFE/SPIRE • SCIM 2.0 • Shared Signals (SSF)
+**Protocols:** OAuth 2.0 • OpenID Connect • SAML 2.0 • SPIFFE/SPIRE • SCIM 2.0 • Shared Signals (SSF) • OID4VP • OID4VCI
 
 ## Live Website
-
+### Main
 **[protocolsoup.com](https://protocolsoup.com)**
 
+### Documenation
+
+**[docs.protocolsoup.com](https://docs.protocolsoup.com)**
+
+### VC Wallet 
+
+**[wallet.protocolsoup.com](https://wallet.protocolsoup.com)**
+
 ---
 
 ## Quick Start

docker/Dockerfile.backend-spiffe

@@ -2,7 +2,7 @@
 # Runs the backend inside the agent container for proper workload attestation
 
 FROM ghcr.io/spiffe/spire-agent:1.15.0 AS spire-agent
-FROM ghcr.io/spiffe/spire-server:1.14.6 AS spire-server
+FROM ghcr.io/spiffe/spire-server:1.15.0 AS spire-server
 
 # Build backend
 FROM golang:1.26.3-alpine AS backend-builder

docker/Dockerfile.spire-server.fly

@@ -6,7 +6,7 @@
 # - Extended CA TTL (90 days) for demo stability
 # - x509pop attestation support for agent resilience
 
-FROM ghcr.io/spiffe/spire-server:1.14.6 AS spire-base
+FROM ghcr.io/spiffe/spire-server:1.15.0 AS spire-base
 
 # Build health check server
 FROM golang:1.26.3-alpine AS health-builder

docs/starlight/package-lock.json

@@ -9,7 +9,7 @@
   },
   "dependencies": {
     "@astrojs/starlight": "^0.39.2",
-    "astro": "^6.3.5",
+    "astro": "^6.3.7",
     "sharp": "^0.34.5"
   },
   "overrides": {