From ddc45e5f40cd152e72003657a6f54915071f2e66 Mon Sep 17 00:00:00 2001 From: Jess Sullivan Date: Sat, 4 Jul 2026 16:33:49 -0400 Subject: [PATCH] fix(tin-2435): bump tummycrypt_tinyland_auth to 0.4.0 (A4 propagation) Consumes the P2 view-grant reconciliation from tinyland-auth 0.4.0 (TIN-2435, operator-ratified 2026-07-04; precedent TIN-1606): moderator, editor, and contributor gain admin.events.view; event_manager gains admin.content.view; every role at or above member now holds the member self-service core. This package only imports the type-only `AdminRole` from @tummycrypt/tinyland-auth (src/schemas.ts) and defines its own local ADMIN_ROLES / ADMIN_PERMISSIONS validation constants, independent of tinyland-auth's ROLE_PERMISSIONS matrix. No test assertions reference the upstream permission grants, so no test changes were required. Verified: all 138 tests pass unchanged both before (0.2.2) and after (0.4.0) the bump via `bazelisk test //:test`. No MODULE.bazel.lock present in this repo (nothing to regenerate). package.json/pnpm-lock.yaml carry no npm dependency on @tummycrypt/tinyland-auth or @tinyland-inc/tinyland-auth (npm resolution was retired for this dep in #9); left untouched per house rule that in-ecosystem deps resolve via the Bazel module graph. --- MODULE.bazel | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/MODULE.bazel b/MODULE.bazel index 8a4a054..814d7a4 100644 --- a/MODULE.bazel +++ b/MODULE.bazel @@ -12,7 +12,7 @@ bazel_dep(name = "platforms", version = "1.0.0") bazel_dep(name = "rules_nodejs", version = "6.7.3") # Inter-module dependencies -bazel_dep(name = "tummycrypt_tinyland_auth", version = "0.2.2") +bazel_dep(name = "tummycrypt_tinyland_auth", version = "0.4.0") node = use_extension("@rules_nodejs//nodejs:extensions.bzl", "node") node.toolchain(node_version = "22.13.1")