From 8c32933900e3ed4aa294b6c06403bd406129d349 Mon Sep 17 00:00:00 2001 From: Pawel Zelawski Date: Fri, 23 Jan 2026 10:51:35 +0100 Subject: feat: migrate from bitcoinjs-message to @noble/curves BREAKING CHANGE: Replace bitcoinjs-message with @noble/curves for signature verification - Remove elliptic vulnerability (all versions <= 6.6.1 affected) - Implement Bitcoin message signing using @noble/curves and @noble/hashes - Support for Legacy (D/S) and Bech32 (dgb1) addresses - Update all dev dependencies to latest stable versions - Remove unnecessary overrides for elliptic and lodash This is a major version update due to dependency changes, though the public API remains unchanged. --- vite.config.ts | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) (limited to 'vite.config.ts') diff --git a/vite.config.ts b/vite.config.ts index 6ec42ad..e7fe7a7 100644 --- a/vite.config.ts +++ b/vite.config.ts @@ -25,14 +25,12 @@ export default defineConfig({ rollupOptions: { // Make sure to externalize deps that shouldn't be bundled // into your library (e.g., peer dependencies) - external: ['crypto', 'module', 'bitcoinjs-message'], // Externalize Node built-ins and the core dependency + external: ['crypto'], // Externalize Node built-ins output: { // Provide global variables to use in the UMD build // for externalized deps globals: { crypto: 'crypto', // Map 'crypto' import to global 'crypto' (Node) - module: 'module', // Map 'module' import to global 'module' (Node) - 'bitcoinjs-message': 'bitcoinjsMessage' // Map 'bitcoinjs-message' to global 'bitcoinjsMessage' }, }, }, -- cgit v1.2.3