NEEDS WORK: Update @digitalcredentials/vc from 9.0.1 to 10.0.0

[dependabot]

Note: This is not a minor change. May not be possible, but also may result in some of our pulled in code to be able to be reverted to the library code.

Major Issue: The v10 of @digitalcredentials/vc dropped commonjs support. We still want to support commonjs

Bumps @digitalcredentials/vc from 9.0.1 to 10.0.0.

Changelog

Sourced from @​digitalcredentials/vc's changelog.

10.0.0 - 2025-04-30

Changed

• BREAKING: Removes CJS build

Fixed

• move status check before expiry check because expiry check throws error that had prevented the status check from running
• attach the credential to the verification result for each credential submitted as part of a VP verification

Commits

• 7bd7d3a prepare for npm publish
• 8eda418 fix CI tests
• 0bb58d3 beta release
• a9de81f remove cjs build
• a360664 set beta version for npm publish
• df56064 fix lint error and prepare changelog and version
• 2ddcb04 add credential object to result
• 4c5a81f fix lint errors
• 45282b7 move status check before expiry check
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[emresurmeli]

@aramikm mentioned there might be a backwards compatibility issue with this package's version bump. Leaving this as of now as BLOCKED. Do not merge until further notice.

[dependabot]

A newer version of @​digitalcredentials/vc exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.