From 8c32933900e3ed4aa294b6c06403bd406129d349 Mon Sep 17 00:00:00 2001 From: Pawel Zelawski Date: Fri, 23 Jan 2026 10:51:35 +0100 Subject: feat: migrate from bitcoinjs-message to @noble/curves BREAKING CHANGE: Replace bitcoinjs-message with @noble/curves for signature verification - Remove elliptic vulnerability (all versions <= 6.6.1 affected) - Implement Bitcoin message signing using @noble/curves and @noble/hashes - Support for Legacy (D/S) and Bech32 (dgb1) addresses - Update all dev dependencies to latest stable versions - Remove unnecessary overrides for elliptic and lodash This is a major version update due to dependency changes, though the public API remains unchanged. --- package.json | 27 +++++++++++++-------------- 1 file changed, 13 insertions(+), 14 deletions(-) (limited to 'package.json') diff --git a/package.json b/package.json index ae58b66..d2fe833 100644 --- a/package.json +++ b/package.json @@ -57,26 +57,25 @@ "access": "public" }, "devDependencies": { - "@types/node": "^22.14.0", - "@typescript-eslint/eslint-plugin": "^8.29.1", - "@typescript-eslint/parser": "^8.29.1", - "@vitest/coverage-v8": "^3.1.1", + "@types/node": "^25.0.10", + "@typescript-eslint/eslint-plugin": "^8.53.1", + "@typescript-eslint/parser": "^8.53.1", + "@vitest/coverage-v8": "^3.2.4", "eslint": "^9.24.0", - "eslint-config-prettier": "^10.1.1", - "prettier": "^3.5.3", + "eslint-config-prettier": "^10.1.8", + "prettier": "^3.8.1", "ts-node": "^10.9.2", - "typescript": "^5.8.3", - "vite": "^6.2.5", - "vite-plugin-dts": "^4.5.3", - "vitest": "^3.1.1" + "typescript": "^5.9.3", + "vite": "^6.4.1", + "vite-plugin-dts": "^4.5.4", + "vitest": "^3.2.4" }, "dependencies": { - "bitcoinjs-message": "^2.2.0" + "@noble/curves": "^2.0.1", + "@noble/hashes": "^1.8.0" }, "overrides": { - "elliptic": "^6.6.1", - "lodash": "^4.17.21", "glob": "^10.5.0", "brace-expansion": "^2.0.2" } -} +} \ No newline at end of file -- cgit v1.2.3