[dependabot]

Bumps @noble/secp256k1 from 1.7.2 to 2.3.0.

Release notes

Sourced from @​noble/secp256k1's releases.

2.3.0

• Preparation for v3: rewrite code
• Remove non-erasable typescript syntax. The .ts code can now be ran natively in node.js
• Point: do assertValidity before encoding
• Signature: Freeze on creation
• CI: attest standalone build files
• Fix for Palemoon browser, which doesn't allow argument-less new Uint8Array()
• Bump typescript target from ES2020 to ES2022

Full Changelog: paulmillr/noble-secp256k1@2.2.3...2.3.0

2.2.3

Revert requirement for crypto.subtle, introduced in 2.2.0 #123. This ensures synchronous environments work correctly without it.

Full Changelog: paulmillr/noble-secp256k1@2.2.2...2.2.3

2.2.2

• Improve documentation for public methods. This ensures efficient auto-generated docs on JSR.

Full Changelog: paulmillr/noble-secp256k1@2.2.1...2.2.2

2.2.1

Same as 2.2.0, but now publishing to JSR without slow-types option.

Full Changelog: paulmillr/noble-secp256k1@2.2.0...2.2.1

2.2.0

What's Changed

• Allow any size of opts.extraEntropy when signing
• Improve hex and bytes conversion
• Feature detect to avoid self.crypto if subtle isn't available by @​gre in paulmillr/noble-secp256k1#123
• Improve types: use isolatedDeclarations option

New Contributors

• @​gre made their first contribution in paulmillr/noble-secp256k1#123
• @​ChALkeR made their first contribution in paulmillr/noble-secp256k1#129

Full Changelog: paulmillr/noble-secp256k1@2.1.0...2.2.0

2.1.0

This release comes one year after v2.0.0, following rare update schedule for easy auditability.

• Point.fromAffine: convert ZERO points properly
• au8: improve Uint8Array check to work in extension context
• Signature: add normalizeS method
• Signature: addRecoveryBit should return more precise type, SignatureWithRecovery
• randomPrivateKey: fetch 48 bytes from CSPRNG instead of 40, to reduce bias

New Contributors

• @​thejoelw made their first contribution in paulmillr/noble-secp256k1#100

... (truncated)

Changelog

Sourced from @​noble/secp256k1's changelog.

2.3.0 (2025-06-11)

• Preparation for v3: rewrite code
• Remove non-erasable typescript syntax. The .ts code can now be ran natively in node.js
• Point: do assertValidity before encoding
• Signature: Freeze on creation
• CI: attest standalone build files
• Fix for Palemoon browser, which doesn't allow argument-less new Uint8Array()
• Bump typescript target from ES2020 to ES2022

2.2.3 (2025-01-07)

Revert requirement for crypto.subtle, introduced in 2.2.0 #123. This ensures synchronous environments work correctly without it.

2.2.2 (2025-01-02)

• Improve documentation for public methods. This ensures efficient auto-generated docs on JSR.

2.2.1 (2025-01-02)

Same as 2.2.0, but now publishing to JSR without slow-types option.

2.2.0 (2025-01-02)

What's Changed

• Allow any size of opts.extraEntropy when signing
• Improve hex and bytes conversion
• Feature detect to avoid self.crypto if subtle isn't available by @​gre in paulmillr/noble-secp256k1#123
• Improve types: use isolatedDeclarations option

New Contributors

• @​gre made their first contribution in paulmillr/noble-secp256k1#123
• @​ChALkeR made their first contribution in paulmillr/noble-secp256k1#129

2.1.0 (2024-03-24)

This release comes one year after v2.0.0, following rare update schedule for easy auditability.

• Point.fromAffine: convert ZERO points properly
• au8: improve Uint8Array check to work in extension context
• Signature: add normalizeS method
• Signature: addRecoveryBit should return more precise type, SignatureWithRecovery
• randomPrivateKey: fetch 48 bytes from CSPRNG instead of 40, to reduce bias

New Contributors

• @​thejoelw made their first contribution in paulmillr/noble-secp256k1#100
• @​MicahZoltu made their first contribution in paulmillr/noble-secp256k1#102

... (truncated)

Commits

• f061f79 Release 2.3.0.
• 3cb880a Bump types/node to v24
• 0f5219c Reuse interface from noble-curves
• 3f4cf5c Bring back prettier. Remove comments in the middle of line.
• 74efa66 Remove shorter Point method names (mul, ok etc)
• 9b2a61a More polishing for v3
• b10737b Renamings
• b7b97ca Sync tests with noble-curves
• f361b47 Rename internal methods to be more explicit
• 2f987b6 Use new tests from curves
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
@noble/secp256k1	[>= 3.a, < 4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[aharoitx]

Closing. secp256k1 2.x changes the signing API (signSync, hmacSha256Sync, DER option). The SDK signs every API request with this library, so this needs a planned migration with tests.
@dependabot ignore this major version