chore(deps): bump the noble-scure-crypto group across 1 directory with 4 updates

[dependabot]

Bumps the noble-scure-crypto group with 4 updates in the / directory: @noble/hashes, @scure/base, @scure/bip32 and @scure/bip39.

Updates @noble/hashes from 1.8.0 to 2.2.0

Release notes

Sourced from @​noble/hashes's releases.

2.2.0

• March 2026 self-audit (all files): no major issues found
  • Audited for spec compliance and security
  • Fix: dkLen=0 handling in pbkdf2, blake2, turboshake, kt
  • Fix: parallelHash with blockLen=0
  • Fix: argon2 progress callback now reaches 100%
  • Improve: digestInto no longer returns a value (better performance)
  • Improve: argon2, blake2 support non-4-divisible dkLen
• Fix all Byte Array types, to ensure proper work in both TypeScript 5.6 & TypeScript 5.9+
  • TS 5.6 has Uint8Array, while TS 5.9+ made it generic Uint8Array<ArrayBuffer>
  • This creates incompatibility of code between versions
  • Previously, it was hard to use and constantly emitted errors similar to TS2345
  • See typescript#62240 for more context
• sha3: speed-up by up to 50%. Contributed by @​ChALkeR in paulmillr/noble-hashes#126
• Fix compilation issues on TypeScript v6
• Make package Big Endian friendly. All tests pass on s390x
• Improve tree-shaking, reduce bundle sizes
• Add massive amounts of documentation everywhere

(We're skipping v2.1, to align with other noble packages)

Full Changelog: paulmillr/noble-hashes@2.0.1...2.2.0

2.0.1

• .js extension must be used for all modules
  • Old: @noble/hashes/sha3
  • New: @noble/hashes/sha3.js
  • This simplifies working in browsers natively without transpilers
  • This was planned for 2.0.0, but was accidentally left out
• package.json: specify exported submodules to ensure typescript autocompletion
• scrypt: Fix error message for maxmem check by @​ChALkeR in paulmillr/noble-hashes#121
• scrypt: 4% speed-up by @​ChALkeR in paulmillr/noble-hashes#122

Full Changelog: paulmillr/noble-hashes@2.0.0...2.0.1

2.0.0

High-level

• The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
  • Node v20.19 is now the minimum required version
  • Package imports now work correctly in bundler-less environments, such as browsers
  • Reduces npm package size (traffic consumed): 152KB => 136KB
  • Reduces unpacked npm size (on-disk space): 1.1MB => 669KB
• Make bundle sizes smaller, compared to v1.x
• .js extension must be used for all modules
  • Old: @noble/hashes/sha3
  • New: @noble/hashes/sha3.js
  • This simplifies working in browsers natively without transpilers

Changes

... (truncated)

Commits

• 81983c2 Release 2.2.0.
• 8883d32 Minor syntax fixes
• e5fedba Run prettier format on tests
• 72e2083 Changes related to March 2026 audit (new tests)
• fd9f580 Changes related to March 2026 audit (typed arrays)
• 9a216b5 Changes related to March 2026 audit
• 85e35d5 Clarify sha3.
• cc8ea40 Merge pull request #126 from ChALkeR/chalker/unroll/sha3/0/chi
• 46c3129 Bump typescript to 6.0.2
• ca90465 Bump devdeps.
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​noble/hashes since your current version.

Updates @scure/base from 1.2.6 to 2.0.0

Release notes

Sourced from @​scure/base's releases.

2.0.0

• The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
  • Node v20.19 is now the minimum required version
  • Package imports now work correctly in bundler-less environments, such as browsers
  • Reduces npm package size (traffic consumed): 26.1KB => 24.5KB
  • Reduces unpacked npm size (on-disk space): 165KB => 102KB
• Make bundle sizes smaller, compared to v1.x
• Upgrade typescript compilation env to ts5.9 and es2022

Full Changelog: paulmillr/scure-base@1.2.6...2.0.0

Commits

• d765626 Release 2.0.0.
• 4f9c0ab Bump jsbt
• 51d4fab Merge devdeps: should, bmark into jsbt
• d530159 Simplify abytes
• 389662d Release 2.0.0-beta.1.
• 90b495c Bump jsbt
• 559c3d9 pkg.json: use standard field order. Use standard gitignore. Adjust test code ...
• 8b4ce93 Bump ts to 5.9. Rewrite tests in ts.
• See full diff in compare view

Updates @scure/bip32 from 1.7.0 to 2.0.1

Release notes

Sourced from @​scure/bip32's releases.

2.0.1

• Upgrade noble-hashes to v2.0.1 and noble-curves to v2.0.1
• Upgrade noble-hashes to 2.0.1
• Upgrade noble-curves to 2.0.1

Full Changelog: paulmillr/scure-bip32@2.0.0...2.0.1

2.0.0

• The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
  • Node v20.19 is now the minimum required version
  • Package imports now work correctly in bundler-less environments, such as browsers
  • Reduces npm package size (traffic consumed): 15KB => 11.7KB
  • Reduces unpacked npm size (on-disk space): 67KB => 43KB
• Make bundle sizes smaller, compared to v1.x
• Upgrade to noble-hashes, noble-curves & scure-base v2
• Prohibit HD key depths over 255 to match spec
• Upgrade typescript compilation env to ts5.9 and es2022

Full Changelog: paulmillr/scure-bip32@1.7.0...2.0.0

Commits

• 9104f9f Release 2.0.1.
• b252f20 Bump hashes and curves
• 5c5beb7 README
• b1b264b Release 2.0.0.
• a979281 Bump jsbt
• c6797ae Ban depth>255. Closes gh-21.
• 628aad1 Merge devdeps: should, bmark into jsbt
• e4b4c79 Release 2.0.0-beta.1.
• f593db7 Bump deps
• 3a29792 pkg.json: use standard field order. Use standard gitignore.
• Additional commits viewable in compare view

Updates @scure/bip39 from 1.6.0 to 2.0.1

Release notes

Sourced from @​scure/bip39's releases.

2.0.1

• .js extension must be used for all modules
  • Old: @scure/bip39/wordlists/english
  • New: @scure/bip39/wordlists/english.js
  • This simplifies working in browsers natively without transpilers
  • This was planned for 2.0.0, but was accidentally left out
• Improve typescript autocompletion for imported submodules
• Upgrade noble-hashes to 2.0.1
• Upgrade noble-curves to 2.0.1

Full Changelog: paulmillr/scure-bip39@2.0.0...2.0.1

2.0.0

• The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
  • Node v20.19 is now the minimum required version
  • Package imports now work correctly in bundler-less environments, such as browsers
  • Reduces npm package size (traffic consumed): 92KB => 78KB
  • Reduces unpacked npm size (on-disk space): 384KB => 201KB
• Make bundle sizes smaller, compared to v1.x
• Upgrade to noble v2
• Add mnemonicToSeedWebcrypto, which uses built-in / native / WebCrypto method - useful for React Native and similar slow environments
• Upgrade typescript compilation env to ts5.9 and es2022

Full Changelog: paulmillr/scure-bip39@1.6.0...2.0.0

Commits

• 753ea75 Release 2.0.1.
• c977e1e Bump hashes to 2.0.1
• 32cf6d7 pkg.json: add back export maps for text editor autocompletion
• 868c08f Release 2.0.0.
• 7b5e3fa Bump jsbt
• 2d88865 Fix node:24 tests
• 7111a9b Add test:node20. Merge devdeps: should, bmark into jsbt
• f8e165e Remove comment heading from module.
• cb1c7cb Release 2.0.0-beta.1.
• 660abb5 Bump deps
• Additional commits viewable in compare view