chore(deps): bump the production-dependencies group with 5 updates by dependabot[bot] · Pull Request #246 · trustcrypto/OnlyKey-App

dependabot · 2026-10-23T20:42:41Z

Bumps the production-dependencies group with 5 updates:

Package	From	To
js-sha256	`0.9.0`	`1.0.0`
openpgp	`6.3.1`	`6.3.2`
react	`19.2.7`	`19.3.1`
react-dom	`19.2.7`	`19.3.1`
zustand	`5.0.14`	`5.0.15`

Updates js-sha256 from 0.9.0 to 1.0.0

Release notes

Sourced from js-sha256's releases.

v1.0.0

Added

Add dedicated ESM, CommonJS, Node.js, and browser distribution entry points.

Add streaming support to the native Node.js SHA-256, SHA-224, and HMAC implementations.

Add distribution contract tests and real browser Web Worker tests with Playwright.

Add Node.js 16, 18, 20, 22, and 24 runtime tests against the packed npm artifact.

Changed

Refactor the implementation into environment-independent core and Node.js modules.

Use the native Node.js crypto implementation for hashing and HMAC.

Load the package version automatically when generating distribution banners.

Export unminified ESM source directly and build only CommonJS and browser/minified distributions.

Replace expect.js, NYC, Tiny Worker, and UglifyJS with Node.js assert, c8, Playwright, and Rollup/Terser.

Build automatically before npm pack and npm publish.

Throw error if update after finalize

Removed

Remove runtime CommonJS, AMD, Node.js, Web Worker, and ArrayBuffer environment switches from the core implementation.

Remove legacy environment flags and obsolete compatibility polyfills.

Remove the old generated sha256.mjs and sha256.node.mjs entry points.

Full Changelog: emn178/js-sha256@v0.12.0...v1.0.0

v0.12.0

What's Changed

Replace TravisCI with GHA by @MasterOdin in emn178/js-sha256#51

Fix uploading coverage to coveralls by @MasterOdin in emn178/js-sha256#52

fix recognize environment is node when use browserfs by @zhangzeren9210 in emn178/js-sha256#53

New Contributors

@zhangzeren9210 made their first contribution in emn178/js-sha256#53

Full Changelog: emn178/js-sha256@v0.11.1...v0.12.0

Changelog

Sourced from js-sha256's changelog.

v1.0.0 / 2026-07-27

Added

Add dedicated ESM, CommonJS, Node.js, and browser distribution entry points.

Add streaming support to the native Node.js SHA-256, SHA-224, and HMAC implementations.

Add distribution contract tests and real browser Web Worker tests with Playwright.

Add Node.js 16, 18, 20, 22, and 24 runtime tests against the packed npm artifact.

Changed

Refactor the implementation into environment-independent core and Node.js modules.

Use the native Node.js crypto implementation for hashing and HMAC.

Load the package version automatically when generating distribution banners.

Export unminified ESM source directly and build only CommonJS and browser/minified distributions.

Replace expect.js, NYC, Tiny Worker, and UglifyJS with Node.js assert, c8, Playwright, and Rollup/Terser.

Build automatically before npm pack and npm publish.

Throw error if update after finalize

Removed

Remove runtime CommonJS, AMD, Node.js, Web Worker, and ArrayBuffer environment switches from the core implementation.

Remove legacy environment flags and obsolete compatibility polyfills.

Remove the old generated sha256.mjs and sha256.node.mjs entry points.

v0.12.0 / 2026-07-18

Added

support ESM #44

Set up GitHub release action / provenance #46

Fixed

Fix uploading coverage to coveralls #52

fix recognize environment is node when use browserfs #53

v0.11.1 / 2025-05-24

Fixed

Fix NodeJS check for electron renderer #49

v0.11.0 / 2024-01-24

Fixed

Generates incorrect hash in some cases #43

dependencies and security issues. #41

v0.10.1 / 2023-08-31

Added

Disable webpack polyfill.

v0.10.0 / 2023-08-30

Fixed

Chrome bug by workaround. #40

deprecated new Buffer, replace with Buffer.from. #34

dependencies and security issues. #32, #36

Changed

... (truncated)

Commits

9a54fb3 update README
1559263 update README
a6d0f63 ### Added
b766562 upgrade js-yaml
7de3689 update ci.yml
03f78b8 Set up GitHub release action / provenance #46
6755b75 fix recognize environment is node when use browserfs #53
62d740c Merge branch 'master' of https://github.com/emn178/js-sha256
36d8fc4 fix recognize environment is node when use browserfs (#53)
aee5ce3 Fix uploading coverage to coveralls
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for js-sha256 since your current version.

Updates openpgp from 6.3.1 to 6.3.2

Release notes

Sourced from openpgp's releases.

v6.3.2

What's Changed

Fix encrypting more than 4GB of data using AEAD (#2059)

config.maxDecompressedMessageSize: improve unbzip2 memory limit enforcement (openpgpjs/openpgpjs#2064)

Fix parsing of four-octet packet lengths of 2**31 and above (#2061)

UnparseablePacket: fix discarding of packets following an unparseable secret (sub)key (#2060)

Fix reading an empty trailing subpacket in v6 signatures (#2055)

Fix calling Message.signDetached directly (#2062)

Full Changelog: openpgpjs/openpgpjs@v6.3.1...v6.3.2

Commits

5f33328 6.3.2
c8d0d68 Merge pull request #2059 (with Safari 14 fallback)
38c9ec2 CI: enable on v6 branch
16e32bb Fix parsing of four-octet packet lengths of 2**31 and above (#2061)
20f2b1b Fix calling Message.signDetached directly (#2062)
97d5023 UnparseablePacket: fix discarding of packets following an unparseable secre...
95dbe0b config.maxDecompressedMessageSize: improve unbzip2 memory limit enforcement...
545271c Merge pull request #2055
See full diff in compare view

Updates react from 19.2.7 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
Additional commits viewable in compare view

Updates react-dom from 19.2.7 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was h...
Description has been truncated

Bumps the production-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [js-sha256](https://github.com/emn178/js-sha256) | `0.9.0` | `1.0.0` | | [openpgp](https://github.com/openpgpjs/openpgpjs) | `6.3.1` | `6.3.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.1` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` | Updates `js-sha256` from 0.9.0 to 1.0.0 - [Release notes](https://github.com/emn178/js-sha256/releases) - [Changelog](https://github.com/emn178/js-sha256/blob/master/CHANGELOG.md) - [Commits](emn178/js-sha256@v0.9.0...v1.0.0) Updates `openpgp` from 6.3.1 to 6.3.2 - [Release notes](https://github.com/openpgpjs/openpgpjs/releases) - [Commits](openpgpjs/openpgpjs@v6.3.1...v6.3.2) Updates `react` from 19.2.7 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.2.7 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `zustand` from 5.0.14 to 5.0.15 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.14...v5.0.15) --- updated-dependencies: - dependency-name: js-sha256 dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: openpgp dependency-version: 6.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zustand dependency-version: 5.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 23, 2026

Navigation Menu

Repository navigation

chore(deps): bump the production-dependencies group with 5 updates - #246

chore(deps): bump the production-dependencies group with 5 updates#246
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-9464cc9df0

dependabot Bot commented on behalf of github Oct 23, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.0.0

Added

Changed

Removed

v0.12.0

What's Changed

New Contributors

v1.0.0 / 2026-07-27

Added

Changed

Removed

v0.12.0 / 2026-07-18

Added

Fixed

v0.11.1 / 2025-05-24

Fixed

v0.11.0 / 2024-01-24

Fixed

v0.10.1 / 2023-08-31

Added

v0.10.0 / 2023-08-30

Fixed

Changed

v6.3.2

What's Changed

19.3.1 (October 14th, 2026)

React Server Components

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.1 (October 14th, 2026)

React Server Components

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 23, 2026 •

edited

Loading