v3.0.1

3.0.1 (2017-11-27)

Bug Fixes

• timing attach vulnerability (b6fcbe5)

v3.0.0

3.0.0 (2017-11-22)

Features

• event.id is no longer required (8c99a9a)
• transform option (1654cc9)

BREAKING CHANGES

• event.data is now event.payload
• event handlers are no called with single {id, name, payload} object

Before

webhooks.on(push, (data, {id, name}) => {})

Now

webhooks.on(push, ({id, name, payload}) => {})

v2.0.0

2.0.0 (2017-11-21)

Features

• event-handler: add .sign() and .verify() methods (6c6e9ea)

BREAKING CHANGES

Before, this would throw an error

webhooks.receive({id, name, data, signature: invalid})

Now, the signature option is ignored as it’s assumed that the request has been already validated. This makes testing much easier, see probot/probot#335 (comment). If you use the EventHandler directly in a framework like hapi, make sure to verify the request before using the receive method using eventHandler.verify(data, signature)

v1.0.0

1.0.0 (2017-11-21)

Features

• initial version (0d38996)