Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented May 28, 2025

This PR contains the following updates:

Package Change Age Confidence
@noble/hashes (source) 1.3.2 -> 1.8.0 age confidence

Release Notes

paulmillr/noble-hashes (@​noble/hashes)

v1.8.0

Compare Source

Preparation for v2

The release contains bugfixes and a few improvements which pave the way for upcoming v2.0.

  • Modules are now available with .js extension
    • Old: @noble/hashes/sha2
    • New: @noble/hashes/sha2.js
    • Old path is still available
    • This simplifies working in browsers natively without transpilers
  • Refactor core functionality, remove duplicate code
  • Decrease package size
Deprecations

In v2, some modules will be removed. For example, sha256 will become sha2. In v1.8, the old names still exist, but are marked as deprecated, to simplify upgrade path.

One of the reasons for moving those was the fact sha384 resided in sha512, sha224 in sha256 - which was confusing. New naming scheme simplifies reasoning and decreases amount of modules.

  • sha256 became sha2 (which already existed for several releases)
  • sha512 became sha2
  • _assert became utils
  • blake2b became blake2
  • blake2s became blake2
  • ripemd160 became legacy (to signify its low security level 2^80)
  • sha1 became legacy

Full Changelog: paulmillr/noble-hashes@1.7.2...1.8.0

v1.7.2

Compare Source

  • legacy: new module, with md5 hash
  • sha1: move to legacy, keep old alias until major release
  • utils: randomBytes should ensure Uint8Array output for old node.js versions
  • utils: use built-in Uint8Array toHex / fromHex when available. Gives 13x speed-up on 256b arrays, 20x speed-up on 32kb arrays
  • Typescript source can now be used without compilation in node.js v24, due to erasableSyntaxOnly

Full Changelog: paulmillr/noble-hashes@1.7.1...1.7.2

v1.7.1

Compare Source

  • Implement blake1 (sha3 proposal)
  • Use typescript verbatimModuleSyntax to support future node.js type stripping
  • Improve documentation

Full Changelog: paulmillr/noble-hashes@1.7.0...1.7.1

v1.7.0

Compare Source

  • The package is now available on JSR.
  • Use isolatedDeclarations typescript option, which massively simplifies documentation auto-gen, and more
    • Check out JSR page for one example
  • Add tons of comments everywhere to improve autocompletion, LLM code gen, and basic code understanding.
  • Remove some exports from internal _assert

New Contributors

Full Changelog: paulmillr/noble-hashes@1.6.1...1.7.0

v1.6.1

Compare Source

  • Fix argon2 initialization
  • pkg.json: include d.ts.map

Full Changelog: paulmillr/noble-hashes@1.6.0...1.6.1

v1.6.0

Compare Source

  • Add support for 4GB+ arrays on supported platforms
  • argon2: Harden, make it stable
  • utils: Improve isBytes speed
  • Improve compatibility with parsers & minifiers

New Contributors

Full Changelog: paulmillr/noble-hashes@1.5.0...1.6.0

v1.5.0

Compare Source

  • Scrypt: relax params check to allow r: 1, p: 8
  • Export additional typescript types
  • Add support for node.js v14.21.3 in addition to v16+
  • Export sha224, sha384, sha512_224, sha512_256 in single-file build

New Contributors

Full Changelog: paulmillr/noble-hashes@1.4.0...1.5.0

v1.4.0

Compare Source

Full Changelog: paulmillr/noble-hashes@1.3.3...1.4.0

v1.3.3

Compare Source

  • Add module sha2, an alias to already-existing sha256 and sha512
  • sha3-addons: Implement TurboSHAKE (https://eprint.iacr.org/2023/342)
  • utils improvements
    • hexToBytes: speed-up 6x, improve error formatting
    • isBytes: improve reliability in bad environments such as jsdom
    • concatBytes: improve safety by early-checking the type
  • Bump typescript version used to build the package to 5.3.2

Full Changelog: paulmillr/noble-hashes@1.3.2...1.3.3


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link

size-limit report 📦

Path Size
js 30.68 KB (0%)
wasm 21.38 KB (0%)

@renovate renovate bot changed the title fix(deps): update dependency @noble/hashes to v1.8.0 chore(deps): update dependency @noble/hashes to v1.8.0 Sep 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant