bump to v0.7.9

- use `Hash.equals` to prevent the timing attack
TheNorthMemory · Jul 26, 2021 · d45d72a · d45d72a
1 parent 6403a6f
commit d45d72a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,8 @@
 # 变更历史
 
+## v0.7.9 (2021-07-26)
+  - 新增 `Hash.equals` 用来判断签名值是否相等；
+
 ## v0.7.8 (2021-07-11)
   - 改进 `Formatter.nonce` 发生器算法；
   - 调整 `Formatter.authorization` 字典排序，关键信息优先展示；

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "wechatpay-axios-plugin",
-  "version": "0.7.8",
+  "version": "0.7.9",
   "description": "微信支付APIv2及v3 NodeJS SDK，支持CLI模式请求OpenAPI，支持v3证书下载，v2付款码支付、企业付款、退款，企业微信-企业支付-企业红包/向员工付款，v2&v3 Native支付、扫码支付、H5支付、JSAPI/小程序支付、合单支付...",
   "main": "index.js",
   "typings": "index.d.ts",