Skip to content

build(deps-dev): Bump @noble/post-quantum from 0.6.1 to 0.7.0 in /probe - #47

Merged
latentharbor merged 1 commit into
mainfrom
dependabot/npm_and_yarn/probe/noble/post-quantum-0.7.0
Aug 14, 2026
Merged

build(deps-dev): Bump @noble/post-quantum from 0.6.1 to 0.7.0 in /probe#47
latentharbor merged 1 commit into
mainfrom
dependabot/npm_and_yarn/probe/noble/post-quantum-0.7.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor

Bumps @noble/post-quantum from 0.6.1 to 0.7.0.

Release notes

Sourced from @​noble/post-quantum's releases.

0.7.0

Breaking

  • hybrid: legacy aliases removed. XWing/MLKEM768X25519ml_kem768_x25519, MLKEM768P256ml_kem768_p256, MLKEM1024P384ml_kem1024_p384, QSFMLKEM768P256QSF_ml_kem768_p256, QSFMLKEM1024P384QSF_ml_kem1024_p384, KitchenSinkMLKEM768X25519KitchenSink_ml_kem768_x25519.
  • utils: afunction no longer exported — moved to @noble/curves/utils.js.

Other

  • Falcon: Fix length check in detached (non-default) falcon
  • MultiplyNTTs intermediate overflowa1*b1*zeta could reach ~2³⁵; now mod(mod(a1*b1)*zeta + a0*b0).
  • ML-DSA sign entropy ordering — randomness drawn before secret-key decoding, so an RNG throw can't leave partially-decoded key material live.
  • ML-DSA externalMu length-checks msg as 64-byte µ; ML-KEM detaches the caller's public key before caching; equalBytes validates its inputs; stricter checks and messages throughout.
  • Up to 2x speed boost for SLH-DSA
  • +16-42% speed boost for hybrid ml-kem-768+x25519
  • Upgrade noble deps to 2.3.0
  • Reduce on-disk unpacked size, 813kb → 654kb (-159kb): by disabling source maps (they became less relevant).

Full Changelog: paulmillr/noble-post-quantum@2.2.0...2.3.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 14, 2026
@latentharbor
latentharbor force-pushed the dependabot/npm_and_yarn/probe/noble/post-quantum-0.7.0 branch from 1c5414d to 80a0b92 Compare August 14, 2026 11:01
@latentharbor
latentharbor merged commit 6572161 into main Aug 14, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/probe/noble/post-quantum-0.7.0 branch August 14, 2026 11:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant