Skip to content

chore(deps): update devdeps (major)#154

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/major-devdeps
Open

chore(deps): update devdeps (major)#154
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/major-devdeps

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jun 16, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@faker-js/faker (source) 9.5.0 → 10.3.0 age confidence
@noble/curves (source) 1.8.1 → 2.0.1 age confidence
@types/jest (source) 29.5.14 → 30.0.0 age confidence
@types/node (source) 22.13.5 → 24.12.0 age confidence
cross-env 7.0.3 → 10.1.0 age confidence
eslint (source) 9.21.0 → 10.0.3 age confidence
eslint-plugin-jest 28.11.0 → 29.15.0 age confidence
jest (source) 29.7.0 → 30.3.0 age confidence
semantic-release 24.2.3 → 25.0.3 age confidence

Release Notes

faker-js/faker (@​faker-js/faker)

v10.3.0

Compare Source

New Locales
Features
Changed Locales
Bug Fixes

v10.2.0

Compare Source

New Locales
Features
Bug Fixes

v10.1.0

Compare Source

New Locales
Bug Fixes

v10.0.0

Compare Source

New Locales
Features
  • locales: add animal vocabulary(bear, bird, cat, rabbit, pet_name) in Korean (#​3535) (0d2143c)
Changed Locales

v9.9.0

Compare Source

New Locales
Features

v9.8.0

Compare Source

New Locales
Changed Locales
Bug Fixes

v9.7.0

Compare Source

New Locales
Bug Fixes

v9.6.0

Compare Source

Features

v9.5.1

Compare Source

Bug Fixes
paulmillr/noble-curves (@​noble/curves)

v2.0.1

Compare Source

  • Disable extension-less imports. If you've used /ed25519, switch to /ed25519.js now. See 2.0.0 for more details.
  • package.json: specify exported submodules to ensure typescript autocompletion
  • package.json: bump hashes to 2.0.1 with scrypt & pkg.json changes
  • ed25519: export map_to_curve_elligator2_curve25519 #​211
  • bls: try-catch pairingBatch in bls12_381.verify() by @​MegaManSec in #​212
  • fft: expose extra info in rootsOfUnity

New Contributors

GitHub Immutable Releases

This GH release does not include standalone noble-curves.js: use 2.0.0 for now, until we upgrade to newly added Immutable Releases

Full Changelog: paulmillr/noble-curves@2.0.0...2.0.1

v2.0.0

Compare Source

High-level

v2 massively simplifies internals, improves security, reduces bundle size and lays path for the future. To simplify upgrading, upgrade first to curves 1.9.x. It would show deprecations in vscode-like text editor.

  • The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
    • Node v20.19 is now the minimum required version
    • Package imports now work correctly in bundler-less environments, such as browsers
    • Reduces npm package size (traffic consumed): 354KB => 300KB
    • Reduces unpacked npm size (on-disk space): 2.1MB => 1.2MB
  • Make bundle sizes smaller, compared to v1.x: -4KB for schnorr, -5.3KB for ristretto255, -9.4KB for x448
  • .js extension must be used for all modules
    • Old: @noble/curves/ed25519
    • New: @noble/curves/ed25519.js
    • This simplifies working in browsers natively without transpilers
New features
  • webcrypto: create friendly noble-like wrapper over built-in WebCrypto
  • oprf: implement RFC 9497 OPRFs (oblivious pseudorandom functions)
    • We support p256, p384, p521, ristretto255 and decaf44
  • weierstrass, edwards: add isValidSecretKey, isValidPublicKey
  • misc: add Brainpool curves: brainpoolP256r1, brainpoolP384r1, brainpoolP512r1
Changes
  • Most methods now expect Uint8Array, string hex inputs are prohibited
    • The change simplifies reasoning, improves security and reduces malleability
    • Point.fromHex now expects string-only hex inputs, use Point.fromBytes for Uint8Array
  • Breaking changes of ECDSA (secp256k1, p256, p384...):
    • sign, verify: Switch to prehashed messages. Instead of
      messageHash, the methods now expect unhashed message.
      To bring back old behavior, use option {prehash: false}
    • sign, verify: Switch to lowS signatures by default.
      This change doesn't affect secp256k1, which has been using lowS since beginning.
      If you tested against specific sign / verify vectors, upgrading to v2 would fail, unless old behavior is brought back.
      To bring back old behavior, use option {lowS: false}
    • sign, verify: Switch to Uint8Array signatures (format: 'compact') by default.
    • verify: der format must be explicitly specified in {format: 'der'}.
      This reduces malleability
    • verify: prohibit Signature-instance signature. User must now always do
      signature.toBytes()
  • Breaking changes of BLS signatures (bls12-381, bn254):
    • Move getPublicKey, sign, verify, signShortSignature etc into two new namespaces:
      bls.longSignatures (G1 pubkeys, G2 sigs) and bls.shortSignatures (G1 sigs, G2 pubkeys).
    • verifyBatch now expects array of inputs {message: ..., publicKey: ...}[]
  • Curve changes:
    • Massively simplify curve creation, split it into point creation & sig generator creation
    • New methods are weierstrass() + ecdsa() / edwards() + eddsa()
    • weierstrass / edwards expect simplified curve params (Fp became p)
    • ecdsa / eddsa expect Point class and hash
    • Remove unnecessary Fn argument in pippenger
  • modular changes:
    • Field#fromBytes() now validates elements to be in 0..order-1 range
  • Upgrade typescript compilation env to ts5.9 and es2022
  • Massively improve error messages, make them more descriptive
Renamings
  • Module changes
    • p256, p384, p521 modules have been moved into nist
    • jubjub module has been moved into misc
  • Point changes
    • ExtendedPoint, ProjectivePoint => Point
    • Point coordinates (projective / extended) from px/ex, py/ey, pz/ez, et => X, Y, Z, T
    • Point.normalizeZ, Point.msm => separate methods in abstract/curve.js submodule
    • Point.fromPrivateKey() got removed, use Point.BASE.multiply() and Point.Fn.fromBytes(secretKey)
    • toRawBytes, fromRawBytes => toBytes, fromBytes
    • RistrettoPoint => ristretto255.Point, DecafPoiont => decaf44.Point
  • Signature (ECDSA) changes
    • toCompactRawBytes, toDERRawBytes => toBytes('compact'), toBytes('der')
    • toCompactHex, toDERHex => toHex('compact'), toHex('der')
    • fromCompact, fromDER => fromBytes(format), fromHex(format)
  • utils changes
    • randomPrivateKey => randomSecretKey
    • utils.precompute, Point#_setWindowSize => Point#precompute
    • edwardsToMontgomery => utils.toMontgomery
    • edwardsToMontgomeryPriv => utils.toMontgomerySecret
  • Rename all curve-specific hash-to-curve methods to *curve*_hasher.
    Example: secp256k1.hashToCurve => secp256k1_hasher.hashToCurve()
  • Massive type renamings and improvements
Removed features
  • Point#multiplyAndAddUnsafe, Point#hasEvenY
  • CURVE property with all kinds of random stuff. Point.CURVE() now replaces it, but only provides
    curve parameters
  • Remove pasta, bn254_weierstrass (NOT pairing-based bn254) curves
  • Field.MASK
  • utils.normPrivateKeyToScalar

Full Changelog: paulmillr/noble-curves@1.9.6...2.0.0

v1.9.7

Compare Source

  • edwards: rename newly introduced / experimental toMontgomeryPriv => toMontgomerySecret
  • weierstrass: Add back SignatureConstructor
  • More deprecations and preparations for v2

Full Changelog: paulmillr/noble-curves@1.9.6...1.9.7

v1.9.6

Compare Source

  • edwards: expose nBitLength, nByteLength
  • Experimental CurveLengths interface: rename secret, public to secretKey, publicKey
  • Point precomputes: initialize calculation earlier, within weierstrass() method (still lazy, waits for first call)
  • bls: new internal tower from v2
  • ed448: Ensure there are two different Fn fields with different BITS length for ed448 / decaf44

Full Changelog: paulmillr/noble-curves@1.9.5...1.9.6

v1.9.5

Compare Source

  • Fix rollup warnings from gh-205
  • add back aliases for secp256r1 / secp384r1 / secp521r1 from gh-203
  • bring back CURVE.nByteLength from gh-202
  • More preparations and deprecations for future v2 release

Full Changelog: paulmillr/noble-curves@1.9.4...1.9.5

v1.9.4

Compare Source

  • Fix gh-201: invalid renaming of ProjConstructor
  • Add more deprecations for the upcoming v2

Full Changelog: paulmillr/noble-curves@1.9.3...1.9.4

v1.9.3

Compare Source

The release contains bugfixes and a few improvements which pave the way for upcoming v2.0.

There are lots of renamings and API adjustments; but all old code would work as-is. The code would visually flagged as "deprecated" (using jsdoc flag) in typescript-supported code environments, which makes it easy to upgrade to new versions.

  • Rename *privateKey to *secretKey everywhere for consistency with post-quantum and non-noble libraries
  • Add keygen method to curves which creates both secret and public keys
  • weierstrass: make endomorphism generic and work for all Koblitz curves
  • weierstrass: add fromBytes and toBytes to Signature, deprecate fromDER, fromCompact, toDERRawBytes, toCompactRawBytes
  • edwards: move edwardsToMontgomery into utils.toMontgomery
  • decaf, ristretto: new interface which makes it more similar to other Points
  • ed448: add ED448_TORSION_GROUP
  • curve: add curve.info interface to all curves for better interop.
  • curve: change public wNAF API
  • modular: add sqrt9mod16
  • hash-to-curve: move all hashers into _hasher props. E.g. secp256k1_hasher
  • test: Add ACVP test vectors

Sensitive code changes

  • wNAF: mostly renamings
  • Field bound validation: for scalars (Fn) and curve fields (Fp)

Full Changelog: paulmillr/noble-curves@1.9.2...1.9.3

v1.9.2

Compare Source

The release contains bugfixes and a few improvements which pave the way for upcoming v2.0.

  • edwards, weierstrass: big refactor, implement much simpler ECDSA / EdDSA API. #​192
    • Old code is still working until v2
    • New API is experimental until next patch release
    • toRawBytes => toBytes
    • ExtendedPoint, ProjectivePoint => Point
    • Point now has Fp and Fn static properties which are its fields
  • weierstrass: add support for ECDSA with cofactor>1 curves
  • weierstrass: add support for points having x:0
  • bls: big refactor, improve types, add new bls.longSignatures and bls.shortSignatures APIs
    • Old code is still working until v2
    • New API is experimental until next patch release
  • utils: reuse noble-hashes utils
  • Use randomBytes and hmac from noble-hashes by default

Sensitive code changes

  • edwards, weierstrass: refactor logic for range checks
  • weierstrass: improve sign() logic for k generation
  • weierstrass: harden multiplyUnsafe, stop using multiplyAndAddUnsafe

New contributors

Full Changelog: paulmillr/noble-curves@1.9.1...1.9.2

v1.9.1

Compare Source

  • abstract/fft - new experimental implementation of FFT (Fast Fourier Transform) / NTT
  • abstract/edwards: verify curve parameters (equation) on initialization
  • abstract/weierstrass: verify curve parameters (discriminant) on initialization
  • abstract/weierstrass: improve getSharedSecret arg validation for rare curves
  • abstract/weierstrass: fix invalid sig recovery decoding length for rare curves
  • abstract/modular: improve sqrt calculation
  • x25519, x448: accept more valid inputs for priv / pub keys
  • secp256k1: improve tree-shaking

Full Changelog: paulmillr/noble-curves@1.9.0...1.9.1

v1.9.0

Compare Source

The release contains bugfixes and a few improvements which pave the way for upcoming v2.0.

  • Modules are now available with .js extension
    • Old: @noble/curves/ed25519
    • New: @noble/curves/ed25519.js
    • Old path is still available
    • This simplifies working in browsers natively without transpilers
  • poseidon: add support for sponge, grain LFSR
  • p256, p384, p521: merge into new "nist" module
  • weierstrass: prohibit y=0 when initializing
  • hash-to-curve: use inv0 everywhere to ensure ZERO elements are returned in exceptional cases
  • modular: improve sqrt logic (tonelliShanks, legendre)
  • modular: fix FpInvertBatch creating arrays with holes instead of arrays with undefined
  • pasta: deprecate curves
  • update noble-hashes to 1.8.0

Full Changelog: paulmillr/noble-curves@1.8.2...1.9.0

v1.8.2

Compare Source

  • Important: this release adjusts wNAF scalar multiplication logic
    • The adjustment is small (deduplication), but wNAF is sensitive code handling private keys
    • Verify the change yourself #​184
  • edwards: (ed25519, ed448) always use complete formula in add()
  • edwards: (ed25519, ed448) ban points with z=0 (zero points have z=1)
  • ed25519: use slower, but more precise CURVE.a definition
  • weierstrass: freeze Signature on creation
  • weierstrass: Fix curve in Palemoon browser #​176
  • hash-to-curve: throw better error for 0 in mapToCurve
  • tower: fix wrong Fp12 fields type
  • misc: new module. Contains jubjub and babyjubjub.
  • utils: use built-in Uint8Array toHex / fromHex when available. Gives 13x speed-up on 256b arrays, 20x speed-up on 32kb arrays

Other changes

  • Update noble-hashes to 1.7.2
  • Reduce standalone file build size by 0.5kb
  • Standalone build files are now attested in CI. Check out README for verification guide
  • Typescript source can now be used without compilation in node.js v24, due to erasableSyntaxOnly

New Contributors

Acknowledgments

Thanks to @​ChALkeR for spotting edwards bug.

Full Changelog: paulmillr/noble-curves@1.8.1...1.8.2

kentcdodds/cross-env (cross-env)

v10.1.0

Compare Source

Features
  • add support for default value syntax (152ae6a)

For example:

"dev:server": "cross-env wrangler dev --port ${PORT:-8787}",

If PORT is already set, use that value, otherwise fallback to 8787.

Learn more about Shell Parameter Expansion

v10.0.0

Compare Source

TL;DR: You should probably not have to change anything if:

  • You're using a modern maintained version of Node.js (v20+ is tested)
  • You're only using the CLI (most of you are as that's the intended purpose)

In this release (which should have been v8 except I had some issues with automated releases 🙈), I've updated all the things and modernized the package. This happened in #​261

Was this needed? Not really, but I just thought it'd be fun to modernize this package.

Here's the highlights of what was done.

  • Replace Jest with Vitest for testing
  • Convert all source files from .js to .ts with proper TypeScript types
  • Use zshy for ESM-only builds (removes CJS support)
  • Adopt @​epic-web/config for TypeScript, ESLint, and Prettier
  • Update to Node.js >=20 requirement
  • Remove kcd-scripts dependency
  • Add comprehensive e2e tests with GitHub Actions matrix testing
  • Update GitHub workflow with caching and cross-platform testing
  • Modernize documentation and remove outdated sections
  • Update all dependencies to latest versions
  • Add proper TypeScript declarations and exports

The tool maintains its original functionality while being completely modernized with the latest tooling and best practices

BREAKING CHANGES
  • This is a major rewrite that changes the module format from CommonJS to ESM-only. The package now requires Node.js >=20 and only exports ESM modules (not relevant in most cases).
eslint/eslint (eslint)

v10.0.3

Compare Source

v10.0.2

Compare Source

v10.0.1

Compare Source

Bug Fixes

Documentation

  • 5b3dbce docs: add AI acknowledgement section to templates (#​20431) (루밀LuMir)
  • 6f23076 docs: toggle nav in no-JS mode (#​20476) (Tanuj Kanti)
  • b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

v10.0.0

Compare Source

v9.39.4

Compare Source

Bug Fixes

Documentation

Chores

v9.39.3

Compare Source

Bug Fixes

  • 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

v9.39.2

Compare Source

v9.39.1

Compare Source

v9.39.0

Compare Source

v9.38.0

Compare Source

Features

  • ce40f74 feat: update complexity rule to only highlight function header (#​20048) (Atul Nair)
  • e37e590 feat: correct no-loss-of-precision false positives with e notation (#​20187) (Francesco Trotta)

Bug Fixes

  • 50c3dfd fix: improve type support for isolated dependencies in pnpm (#​20201) (Francesco Trotta)
  • a1f06a3 fix: correct SourceCode typings (#​20114) (Pixel998)

Documentation

  • 462675a docs: improve web accessibility by hiding non-semantic character (#​20205) (루밀LuMir)
  • c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#​20203) (루밀LuMir)
  • b39e71a docs: Update README (GitHub Actions Bot)
  • cd39983 docs: move custom-formatters type descriptions to nodejs-api (#​20190) (Percy Ma)

Chores

v9.37.0

Compare Source

Features

  • 39f7fb4 feat: preserve-caught-error should recognize all static "cause" keys (#​20163) (Pixel998)
  • f81eabc feat: support TS syntax in no-restricted-imports (#​19562) (Nitin Kumar)

Bug Fixes

Documentation

  • b950359 docs: fix typos across the docs (#​20182) (루밀LuMir)
  • 42498a2 docs: improve ToC accessibility by hiding non-semantic character (#​20181) (Percy Ma)
  • 29ea092 docs: Update README (GitHub Actions Bot)
  • 5c97a04 docs: show availableUntil in deprecated rule banner (#​20170) (Pixel998)
  • 90a71bf docs: update README files to add badge and instructions (#​20115) (루밀LuMir)
  • 1603ae1 docs: update references from master to main (#​20153) (루밀LuMir)

Chores

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Jun 16, 2025

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

  • Branch has one or more failed status checks

@renovate renovate bot added the maintenance clear the gutters, tighten the screws label Jun 16, 2025
@renovate renovate bot changed the title chore(deps): update dependency jest to v30 chore(deps): update devdeps to v30 (major) Jun 16, 2025
@renovate renovate bot force-pushed the renovate/major-devdeps branch 2 times, most recently from 31a409a to 4fdbebd Compare June 18, 2025 14:58
@renovate renovate bot changed the title chore(deps): update devdeps to v30 (major) chore(deps): update devdeps (major) Jun 18, 2025
@renovate renovate bot force-pushed the renovate/major-devdeps branch 4 times, most recently from 79efe35 to 22870ff Compare June 25, 2025 04:12
@renovate renovate bot force-pushed the renovate/major-devdeps branch from 22870ff to 157cf71 Compare July 3, 2025 02:58
@renovate renovate bot force-pushed the renovate/major-devdeps branch 2 times, most recently from f4767d1 to 36952d1 Compare July 26, 2025 02:24
@renovate renovate bot force-pushed the renovate/major-devdeps branch 4 times, most recently from 700c7a7 to 2441ee7 Compare August 13, 2025 17:07
@renovate renovate bot force-pushed the renovate/major-devdeps branch 5 times, most recently from 9271c12 to 4a2573a Compare August 26, 2025 05:57
@renovate renovate bot force-pushed the renovate/major-devdeps branch 3 times, most recently from d836e4e to 86aa6c7 Compare August 31, 2025 13:25
@renovate renovate bot force-pushed the renovate/major-devdeps branch 2 times, most recently from e2e98ed to 5dd856f Compare September 8, 2025 00:45
@renovate renovate bot force-pushed the renovate/major-devdeps branch 3 times, most recently from c82a937 to 6bdef49 Compare September 28, 2025 08:31
@renovate renovate bot force-pushed the renovate/major-devdeps branch 2 times, most recently from 927955b to 763c666 Compare November 18, 2025 12:57
@renovate renovate bot force-pushed the renovate/major-devdeps branch 2 times, most recently from 81e44bf to b9b07aa Compare November 23, 2025 21:08
@renovate renovate bot force-pushed the renovate/major-devdeps branch 2 times, most recently from 9f5f706 to 120d7f7 Compare December 9, 2025 03:43
@renovate renovate bot force-pushed the renovate/major-devdeps branch 5 times, most recently from 5101604 to 893e73c Compare December 14, 2025 20:51
@renovate renovate bot force-pushed the renovate/major-devdeps branch 5 times, most recently from 1c79a11 to a46bc5c Compare December 29, 2025 00:49
@renovate renovate bot force-pushed the renovate/major-devdeps branch 6 times, most recently from 8c7fda8 to b940517 Compare January 4, 2026 18:15
@renovate renovate bot force-pushed the renovate/major-devdeps branch 6 times, most recently from 66a4852 to c261e3d Compare January 15, 2026 17:24
@renovate renovate bot force-pushed the renovate/major-devdeps branch from c261e3d to 671e71b Compare January 19, 2026 15:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

maintenance clear the gutters, tighten the screws

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants