Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 26, 2025

This PR contains the following updates:

Package Change Age Confidence
@noble/hashes (source) ^1.3.0 -> ^2.0.0 age confidence

Release Notes

paulmillr/noble-hashes (@​noble/hashes)

v2.0.1

Compare Source

  • .js extension must be used for all modules
    • Old: @noble/hashes/sha3
    • New: @noble/hashes/sha3.js
    • This simplifies working in browsers natively without transpilers
    • This was planned for 2.0.0, but was accidentally left out
  • package.json: specify exported submodules to ensure typescript autocompletion
  • scrypt: Fix error message for maxmem check by @​ChALkeR in #​121
  • scrypt: 4% speed-up by @​ChALkeR in #​122

Full Changelog: paulmillr/noble-hashes@2.0.0...2.0.1

v2.0.0

Compare Source

High-level
  • The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
    • Node v20.19 is now the minimum required version
    • Package imports now work correctly in bundler-less environments, such as browsers
    • Reduces npm package size (traffic consumed): 152KB => 136KB
    • Reduces unpacked npm size (on-disk space): 1.1MB => 669KB
  • Make bundle sizes smaller, compared to v1.x
  • .js extension must be used for all modules
    • Old: @noble/hashes/sha3
    • New: @noble/hashes/sha3.js
    • This simplifies working in browsers natively without transpilers
Changes
  • Only allow Uint8Array as hash inputs, prohibit string
    • Strict validation checks improve security
    • To replicate previous behavior, use utils.utf8ToBytes
  • Rename / remove some modules for consistency. Previously, sha384 resided in sha512, which was weird
    • sha256, sha512 => sha2.js (consistent with sha3.js)
    • blake2b, blake2s => blake2.js (consistent with blake3.js, blake1.js)
    • ripemd160, sha1, md5 => legacy.js (all low-security hashes are there)
    • _assert => utils.js
    • crypto internal module got removed: use built-in WebCrypto instead
  • Improve typescript types & option autocomplete
  • Upgrade typescript compilation env to ts5.9 and es2022
  • Massively improve error messages, make them more descriptive

Full Changelog: paulmillr/noble-hashes@1.8.0...2.0.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the maintenance label Aug 26, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Aug 26, 2025

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.


  • Branch has one or more failed status checks

@renovate renovate bot force-pushed the renovate/noble-hashes-2.x branch 2 times, most recently from 9df0b60 to 8360946 Compare September 8, 2025 05:11
@renovate renovate bot force-pushed the renovate/noble-hashes-2.x branch 2 times, most recently from ca01b39 to b31d7f9 Compare September 22, 2025 05:14
@renovate renovate bot force-pushed the renovate/noble-hashes-2.x branch from b31d7f9 to fa59218 Compare September 22, 2025 17:06
@renovate renovate bot force-pushed the renovate/noble-hashes-2.x branch from fa59218 to e37ce24 Compare October 6, 2025 04:39
@renovate renovate bot force-pushed the renovate/noble-hashes-2.x branch 2 times, most recently from f511695 to b5f7cf9 Compare October 14, 2025 08:54
@renovate renovate bot force-pushed the renovate/noble-hashes-2.x branch from b5f7cf9 to cdbca20 Compare October 20, 2025 06:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants