Bump o1js from 0.17.0 to 1.3.1 in /packages/mina

[dependabot]

Bumps o1js from 0.17.0 to 1.3.1.

Changelog

Sourced from o1js's changelog.

1.3.1 - 2024-06-11

Breaking Changes

• Improve efficiency of Experimental.OffchainState implementation o1-labs/o1js#1672
  • Comes with breaking changes to the internal circuits of OffchainState
  • Also, introduce offchainState.commitments() to initialize the state commitments onchain. Using OffchainStateCommitments.empty() no longer works.

Added

• Experimental.IndexedMerkleMap, a better primitive for Merkleized storage o1-labs/o1js#1666 o1-labs/o1js#1671
  • Uses 4-8x fewer constraints than MerkleMap
  • In contrast to MerkleTree and MerkleMap, IndexedMerkleMap has a high-level API that can be used in provable code
• Added Ecdsa.verifyV2() and Ecdsa.verifySignedHashV2 methods to the Ecdsa class. o1-labs/o1js#1669

Deprecated

• Int64.isPositive() and Int64.mod() deprecated because they behave incorrectly on -0 o1-labs/o1js#1660
  • This can pose an attack surface, since it is easy to maliciously pick either the +0 or the -0 representation
  • Use Int64.isPositiveV2() and Int64.modV2() instead
  • Also deprecated Int64.neg() in favor of Int64.negV2(), for compatibility with v2 version of Int64 that will use Int64.checkV2()
• Ecdsa.verify() and Ecdsa.verifySignedHash() deprecated in favor of Ecdsa.verifyV2() and Ecdsa.verifySignedHashV2() due to a security vulnerability found in the current implementation o1-labs/o1js#1669

Fixed

• Fix handling of fetch response for non-existing accounts o1-labs/o1js#1679

1.3.0 - 2024-05-23

Added

• Added base64Encode() and base64Decode(byteLength) methods to the Bytes class. o1-labs/o1js#1659

Fixes

• Fix type inference for method.returns(Type), to require a matching return signature o1-labs/o1js#1653
• Fix Struct.empty() returning a garbage object when one of the base types doesn't support empty() o1-labs/o1js#1657
• Fix Option.value_exn None error when using certain custom gates in combination with recursion o1-labs/o1js#1336 MinaProtocol/mina#15588

1.2.0 - 2024-05-14

Added

• Offchain state MVP exported under Experimental.OffchainState o1-labs/o1js#1630 o1-labs/o1js#1652
  • allows you to store any number of fields and key-value maps on your zkApp
  • implemented using actions which define an offchain Merkle tree
• Option for defining an optional version of any provable type o1-labs/o1js#1630
• MerkleTree.clone() and MerkleTree.getLeaf(), new convenience methods for merkle trees o1-labs/o1js#1630
• MerkleList.forEach(), a simple and safe way for iterating over a MerkleList
• Unconstrained.provableWithEmpty() to create an unconstrained provable type with a known empty() value o1-labs/o1js#1630

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #806.