Methods to handle GitHub Webhook requests
Last release 1 years ago
20 May 2025
Ships fairly regularly
a new release about every 3 months
Nearly every release is documented
notes for 12 of 12 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
18 releases · first in 2021
Release timeline
18 releases since 202120222023202420252026
Releases
- 6.0.020 May 2025
Release notes
Open source → - 5.1.16 Feb 2025
- 5.1.04 Apr 2024
- 5.0.023 Feb 2024
Release notes
Open source →5.0.0 (2024-02-23)
Features
BREAKING CHANGES
- output ESM instead of CommonJS
- remove SHA1 support
- The
verify()andsign()methods no longer accept an options object
- 5.0.0-beta.623 Feb 2024pre-release
Release notes
Open source → - 5.0.0-beta.523 Feb 2024pre-release
Release notes
Open source →5.0.0-beta.5 (2024-02-23)
Features
- always assume sha256, remove
SignOptions(ebf773c)
BREAKING CHANGES
- The
verify()andsign()methods no longer accept an options object
- always assume sha256, remove
- 5.0.0-beta.423 Feb 2024pre-release
Release notes
Open source →5.0.0-beta.4 (2024-02-23)
Features
- remove SHA1 support (30b2044)
BREAKING CHANGES
- remove SHA1 support
- 5.0.0-beta.323 Feb 2024pre-release
- 5.0.0-beta.217 Feb 2024pre-release
Release notes
Open source → - 5.0.0-beta.117 Feb 2024pre-release
Release notes
Open source →5.0.0-beta.1 (2024-02-17)
Features
- switch to ESM (87dc90f)
BREAKING CHANGES
- output ESM instead of CommonJS
- 4.1.017 Feb 2024
- 4.0.012 Jun 2023
- 3.0.35 Jun 2023
- 3.0.28 Jan 2023
- 3.0.14 Oct 2022
- 3.0.07 Jul 2022
Release notes
Open source → - 2.0.017 Jun 2021
Release notes
Open source →BREAKING CHANGES
signorverifyno longer accept an object for the event payload argument.If you only have access to an already parsed object, stringify it with
const eventPayloadString = ( JSON.stringify(eventPayload, null, 2) + "\n" ).replace(/[^\\]\\u[\da-f]{4}/g, (s) => { return s.substr(0, 3) + s.substr(3).toUpperCase(); }); - 1.0.010 Apr 2021