Skip to main content

TideCloak 0.13.33

Summary​

TideCloak 0.13.33 is a patch release focused on hardening the Vendor Rotation Key (VRK) lifecycle — aligning expiry windows across IDP, ORK, and Wallet boundaries, and fixing a Stripe subscription lookup edge case that could block rotation.

Key Features​

VRK Expiry Alignment : Production VRK generation now bakes in the ORK-sanctioned pack expiry, eliminating the 6-day delta between VRK expiry and Wallet expiry that previously surfaced during rotation.

Bootstrap VRK Headroom : Initial bootstrap VRKs now have enough headroom to survive their first rotation cycle, removing an edge case where a freshly-deployed environment could land in an unrotatable state.

Subscription Lookup Fix : ORK now resolves the active subscription by reading the first subscription from the customer entry, fixing a regression where customers with rotated subscription IDs could fail VRK rotation.

Package Updates : Version bumps across tide-js, tidecloak-js, and Heimdall.

Enclave SRI : sha256-V1E9rj7xImi5RAJZxCoMTD8Z+ysP3JgeNTtozss1Mjg=

Detailed changelog​

For a granular per-repository breakdown of changes (Midgard, Heimdall, ORK, Ragnarok, TideJS, TideCloakJS, Asgard, master-libs, tidecloak-override, and upstream Keycloak), see the detailed changelog.