Skip to content

fix(deps): update dependency @noble/ed25519 to ^3.0.1#1342

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/noble-ed25519-3.x
Open

fix(deps): update dependency @noble/ed25519 to ^3.0.1#1342
renovate[bot] wants to merge 1 commit intomainfrom
renovate/noble-ed25519-3.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 31, 2026

This PR contains the following updates:

Package Change Age Confidence
@noble/ed25519 (source) ^3.0.0^3.0.1 age confidence

Release Notes

paulmillr/noble-ed25519 (@​noble/ed25519)

v3.0.1

Compare Source

  • Fix a low-severity issue affecting verify
    • An attacker with an access to secret key was able to produce signatures, which were valid for all messages for their secret key
    • Impact: low, primarily systems which rely on non-repudiation
    • Special thanks to folks who've reported the issue: Yituo He (a.k.a. @​HaveYouTall) and @​sunyxedu
  • Speed-up everything 1.5x using new modP with HAC 14.47, HAC 14.50.
    • Contributed by @​georg95 in #​117.
    • keygen x 10,594 ops/sec @​ 94μs/op => 14,610 ops/sec @​ 68μs/op
    • sign x 5,267 ops/sec @​ 189μs/op => 7,225 ops/sec @​ 138μs/op
    • verify x 1,203 ops/sec @​ 830μs/op => 1,972 ops/sec @​ 506μs/op

Full Changelog: paulmillr/noble-ed25519@3.0.0...3.0.1


Configuration

📅 Schedule: Branch creation - "before 4am on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Mar 31, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 31, 2026

Extension builds preview

Name Link
Latest commit 19e8cb2
Latest job logs Run #24151085781
Chrome (1.37MB)Download
Firefox (1.37MB)Download
Safari (2.32MB)Download

@renovate renovate bot force-pushed the renovate/noble-ed25519-3.x branch from 61e2257 to 959fe2e Compare April 1, 2026 18:46
@renovate renovate bot force-pushed the renovate/noble-ed25519-3.x branch from 959fe2e to 19e8cb2 Compare April 8, 2026 18:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants