Skip to content

Update dependency ethereum-cryptography to v3 #154

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 13, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
ethereum-cryptography ^2.0.0 -> ^3.0.0 age adoption passing confidence

Release Notes

ethereum/js-ethereum-cryptography (ethereum-cryptography)

v3.2.0

Compare Source

  • utils: use built-in Uint8Array toHex / fromHex when available. Gives 13x speed-up on 256b arrays, 20x speed-up on 32kb arrays
  • utils.randomBytes: ensure same return type Uint8Array in old nodejs
  • ciphers: update from v1.2.1 to v1.3.0. diff
  • hashes: update from v1.7.1 to v1.8.0. diff
    • Submodule renames, refactoring
  • curves: update from v1.8.1 to v1.9.0. diff
    • weierstrass: prohibit y=0 when initializing
    • modular: improve sqrt logic
  • bip32: update from v1.6.2 to v1.7.0. diff
  • bip39: update from v1.5.4 to v1.6.0. diff
  • base: update from v1.2.4 to v1.2.5 diff

Reviewed in https://github.com/ethereum/js-ethereum-cryptography/pull/141

New Contributors

Full Changelog: ethereum/js-ethereum-cryptography@3.1.0...3.2.0

v3.1.0

Compare Source

  • ciphers: update from v1.0.0 to v1.2.1. diff
    • Improve input validation logic
  • hashes: update from v1.5.0 to v1.7.1. diff
    • Add support for 4GB+ arrays on supported platforms
  • curves: update from v1.6.0 to v1.8.1. diff
    • Add MSM and new scalar multiplication methods, switch multiplyUnsafe to it
    • weierstrass: add support for strict format option in verify
  • bip32: update from v1.5.0 to v1.6.2. diff
  • bip39: update from v1.4.0 to v1.5.4. diff
  • base: update from v1.1.9 to v1.2.4 diff
    • Improve speed 4x

Overall, dependencies received a lot of smaller changes, such as:

  • Switching to isolatedDeclarations typescript option, which massively simplifies documentation auto-gen
  • Switching to verbatimModuleSyntax typescript option, to support future JS type erasure
  • Add tons of documentation everywhere to improve autocompletion, LLM code generation
  • Improving hex parsing

New Contributors

Full Changelog: ethereum/js-ethereum-cryptography@3.0.0...3.1.0

v3.0.0

Compare Source

  • aes: change from native async to noble-ciphers sync
  • new bls module: bls12-381 operations
  • new bn module: bn254 operations
  • new math module: modPow and modInv operations
  • Update dependencies
  • Add support for node.js v14
  • Improve typescript compatibility by emitting separate types for cjs / esm
  • Use NPM provenance to publish transparent builds from GitHub CI

Backwards-incompatible changes:

  1. utils: crypto var had been removed
  2. aes: async methods became sync

Special thanks to @​legobeat for release improvements and review.

Full Changelog: ethereum/js-ethereum-cryptography@2.2.1...3.0.0

v2.2.1

Compare Source

Full Changelog: ethereum/js-ethereum-cryptography@2.2.0...2.2.1

v2.2.0

Compare Source

  • Bump noble-curves from 1.3.0 to 1.4.0
  • Bump noble-hashes from 1.3.3 to 1.4.0
  • Bump scure-bip32 from 1.3.3 to 1.4.0
  • Bump scure-bip39 from 1.2.2 to 1.3.0

Full Changelog: ethereum/js-ethereum-cryptography@2.1.3...2.2.0

v2.1.3

Compare Source

Update dependencies:

Full Changelog: ethereum/js-ethereum-cryptography@2.1.2...2.1.3


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

socket-security bot commented Sep 13, 2024

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedethereum-cryptography@​2.1.2 ⏵ 3.2.0100 +110010081100

View full report

@renovate renovate bot force-pushed the renovate/ethereum-cryptography-3.x branch from 2ac6f9b to 101fee9 Compare August 10, 2025 13:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants