[Snyk] Upgrade @noble/hashes from 1.2.0 to 1.5.0

[snyk-io]

Snyk has created this PR to upgrade @noble/hashes from 1.2.0 to 1.5.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.

• The recommended version was released on 22 days ago.

Release notes

Package name: @noble/hashes

• 1.5.0 - 2024-09-01
  
  • Scrypt: relax params check to allow r: 1, p: 8
  • Export additional typescript types
  • Add support for node.js v14.21.3 in addition to v16+
  • Export sha224, sha384, sha512_224, sha512_256 in single-file build

  New Contributors

  • @ quixoten made their first contribution in #89
  • @ legobeat made their first contribution in #94
  • @ iAchilles made their first contribution in #92
  • @ sreyemnayr made their first contribution in #99

  Full Changelog: 1.4.0...1.5.0

• 1.4.0 - 2024-03-14
  
  • Add support for big endian platforms by @ jonathan-albrecht-ibm in #81
  • Use XOF constructor wrapper for cShake by @ stknob in #82
  • Rename _sha2 to _md
  • utils, _assert: reduce code duplication
  • tsconfig: change module to Node16

  Full Changelog: 1.3.3...1.4.0

• 1.3.3 - 2023-12-11
  
  • Add module sha2, an alias to already-existing sha256 and sha512
  • sha3-addons: Implement TurboSHAKE (https://eprint.iacr.org/2023/342)
  • utils improvements
    • hexToBytes: speed-up 6x, improve error formatting
    • isBytes: improve reliability in bad environments such as jsdom
    • concatBytes: improve safety by early-checking the type
  • Bump typescript version used to build the package to 5.3.2

  Full Changelog: 1.3.2...1.3.3

• 1.3.2 - 2023-08-23
  
  • Tree shaking improvements:
    • annotate top-level incovations as pure
    • use const enums
    • decrease wildcard imports of _assert and _u64
    • declare package side-effects free
  • argon2: fix checks for parallelism and iterations parameters
  • utils: fix isPlainObject in serverless environments, used in scrypt and pbkdf2
  • typescript: Disable moduleResolution config setting, since it is viral

  New Contributors

  • @ jeetiss made their first contribution in #65
  • @ Systemcluster made their first contribution in #69

  Full Changelog: 1.3.1...1.3.2

• 1.3.1 - 2023-06-03
  

  What's Changed

  • Fix utf8ToBytes in firefox extension context (https://bugzil.la/1681809)
  • Ensure blake3 inputs are immutable by @ libitx in #51
  • sha3-addons: add PURE annotations to reduce bundle size
  • utils: harmonize with noble-curves
  • Type fixes
    • sha3, blake3: Fix XOF type issue, closes #55
    • hmac: export HMAC type, fix #52
    • cryptoNode: remove dependency on @ types/node

  New Contributors

  • @ pkieltyka made their first contribution in #47
  • @ libitx made their first contribution in #51
  • @ janek26 made their contribution

  Full Changelog: 1.3.0...1.3.1

• 1.3.0 - 2023-03-16
  

  Changed logic for importing native cryptography. Built-in crypto (webcrypto) is now used through all platforms, including node.js.

  Full Changelog: 1.2.0...1.3.0

• 1.2.0 - 2023-02-02
  
  • Add experimental Argon2 implementation from RFC9106.
  • Source maps are now included in the package
  • Fixes import "_assert" issue

  Full Changelog: 1.1.5...1.2.0

from @noble/hashes GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@noble/hashes@1.5.0	None	0	837 kB	paulmillr

🚮 Removed packages: npm/@noble/hashes@1.2.0

View full report↗︎