From b01807b6917c482f4fea7471fce8ad3f6a6efb1d Mon Sep 17 00:00:00 2001 From: moscowchill Date: Sat, 26 Sep 2026 11:53:35 +0200 Subject: [PATCH] chore(deps): harden the @theqrl crypto stack Bump the upstream post-quantum crypto packages released on 2026-09-17: mldsa87 2.2.0 and wallet.js 6.3.0 reject weak ML-DSA-87 public keys and invalid secret keys and bound signing work, qrl-cryptography 0.3.3 carries the same validation. Root package: @theqrl/mldsa87 ^2.1.4 -> ^2.2.0, @theqrl/qrl-cryptography ^0.3.1 -> ^0.3.3, @theqrl/wallet.js ^6.2.4 -> ^6.3.0. @theqrl/web3 1.0.3 stays, and its sub-packages pin the old crypto versions exactly, so both lockfiles gained npm overrides that collapse the tree onto one hardened copy of each package. The frontend has no direct declarations and pins the literal versions; the root uses the $ reference form because npm requires an override to match a direct spec. Both are temporary and can go once @theqrl/web3 publishes a release above 1.0.3 with its own bump. Claude-Session: https://claude.ai/code/session_01SWsDPAzBHwiNnRXXmYhvyW --- frontend/package-lock.json | 64 ++------ frontend/package.json | 3 + package-lock.json | 289 +++---------------------------------- package.json | 9 +- 4 files changed, 44 insertions(+), 321 deletions(-) diff --git a/frontend/package-lock.json b/frontend/package-lock.json index c22451e..2170f8b 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -2302,79 +2302,43 @@ } }, "node_modules/@theqrl/mldsa87": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.1.3.tgz", - "integrity": "sha512-sQxeMZTeJG84v8lK8gRztuHHC2hB6RG2yWQc7oHv19lExG6vB4qvn8nk8/0ffseYXMqfqU5dmZ4jdabk9P3TEg==", + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.2.0.tgz", + "integrity": "sha512-rujMGT6vdMTQbtVyMiOL1Q3e7VxLrNZqP/disR4m20+nen4e+bjR4wvt/av8M5e0qDNVjO7sjGctlzC81/qVgw==", "license": "MIT", "dependencies": { - "@noble/hashes": "2.2.0" + "@noble/hashes": "2.4.0" }, "engines": { "node": ">=20.19.0" } }, - "node_modules/@theqrl/mldsa87/node_modules/@noble/hashes": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz", - "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==", - "license": "MIT", - "engines": { - "node": ">= 20.19.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - } - }, "node_modules/@theqrl/qrl-cryptography": { - "version": "0.3.0", - "resolved": "https://registry.npmjs.org/@theqrl/qrl-cryptography/-/qrl-cryptography-0.3.0.tgz", - "integrity": "sha512-2d7QcK/ZQKOmphnj0lSRJLyeXO3o0degg0mjEMHH+5g4LXvrgoVV1i/bTqzS78DgGRB4Mn3kUPXg6QW3KO712w==", + "version": "0.3.3", + "resolved": "https://registry.npmjs.org/@theqrl/qrl-cryptography/-/qrl-cryptography-0.3.3.tgz", + "integrity": "sha512-jdfGQrvrlkjz/YFf15aDEwb/2X436XaTlA+JYFcuKHDjpouHHKv8sbkPtPUpjB/b0y+VX2XoMZBwHhZt0UFwkQ==", "license": "MIT", "dependencies": { - "@noble/hashes": "2.2.0", - "@theqrl/mldsa87": "2.1.3" + "@noble/hashes": "2.4.0", + "@theqrl/mldsa87": "2.2.0" }, "engines": { "node": ">=20.19" } }, - "node_modules/@theqrl/qrl-cryptography/node_modules/@noble/hashes": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz", - "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==", - "license": "MIT", - "engines": { - "node": ">= 20.19.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - } - }, "node_modules/@theqrl/wallet.js": { - "version": "6.2.3", - "resolved": "https://registry.npmjs.org/@theqrl/wallet.js/-/wallet.js-6.2.3.tgz", - "integrity": "sha512-1wQcPKDqtLpM5sn6NKEbn4UIJwZ9BWVqG1TbrW1zBRuw8NUaiejjDZQcKwoHrnNV3TQe9dJ1jnu+PLxq9LOqyw==", + "version": "6.3.0", + "resolved": "https://registry.npmjs.org/@theqrl/wallet.js/-/wallet.js-6.3.0.tgz", + "integrity": "sha512-zTZsLIQKm4CaRAs4sfnalunVrFotxRIY6adwDCN01Ts55TrYn0qp8Jbs6Tv3/9cQDGJzEYszN1oIw49WcUActg==", "license": "MIT", "dependencies": { - "@noble/hashes": "2.2.0", - "@theqrl/mldsa87": "2.1.3" + "@noble/hashes": "2.4.0", + "@theqrl/mldsa87": "2.2.0" }, "engines": { "node": ">=20.19" } }, - "node_modules/@theqrl/wallet.js/node_modules/@noble/hashes": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz", - "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==", - "license": "MIT", - "engines": { - "node": ">= 20.19.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - } - }, "node_modules/@theqrl/web3": { "version": "1.0.3", "resolved": "https://registry.npmjs.org/@theqrl/web3/-/web3-1.0.3.tgz", diff --git a/frontend/package.json b/frontend/package.json index ca0c306..7a686ad 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -56,6 +56,9 @@ "node": ">=22.22.0" }, "overrides": { + "@theqrl/mldsa87": "2.2.0", + "@theqrl/qrl-cryptography": "0.3.3", + "@theqrl/wallet.js": "6.3.0", "brace-expansion@1": "1.1.18", "brace-expansion@5": "5.0.9", "esbuild": "0.28.1", diff --git a/package-lock.json b/package-lock.json index e17f6d7..a1040f6 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10,13 +10,12 @@ "license": "GPL-3.0", "dependencies": { "@noble/hashes": "^2.3.0", - "@theqrl/mldsa87": "^2.1.4", - "@theqrl/qrl-cryptography": "^0.3.1", - "@theqrl/wallet.js": "^6.2.4", + "@theqrl/mldsa87": "^2.2.0", + "@theqrl/qrl-cryptography": "^0.3.3", + "@theqrl/wallet.js": "^6.3.0", "@theqrl/web3": "^1.0.3", "dotenv": "^17.4.2" - }, - "description": "Native QRL non-custodial pooled staking" + } }, "node_modules/@adraffy/ens-normalize": { "version": "1.11.1", @@ -152,9 +151,9 @@ } }, "node_modules/@noble/hashes": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.3.0.tgz", - "integrity": "sha512-oN+QwyX7VSHotibwubG3kpzbwKrfnyR6OOO+3Nk/53ADL7FmgHHz4TgrbaYKvvOw09u6QTx0oiH1cNCIOuN0CQ==", + "version": "2.4.0", + "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.4.0.tgz", + "integrity": "sha512-X5XaVWZIBCT7HHZGm5I7ZQXDwLG+bGXuSrMQAW+7Zvl87h1kmc1ZB1VSRJcpUfoUrGQp4Fkoxm5kZ+Ms+aW+eA==", "license": "MIT", "engines": { "node": ">= 20.19.0" @@ -182,91 +181,43 @@ } }, "node_modules/@theqrl/mldsa87": { - "version": "2.1.4", - "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.1.4.tgz", - "integrity": "sha512-VX+Fhdqgm1vL6b3eGiugOUsW6mvgycAQnap1gi/EnQAIy5IDJzpToi55Ai41NUA0hbLW61VHNAsCXfvp80Cp3w==", + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.2.0.tgz", + "integrity": "sha512-rujMGT6vdMTQbtVyMiOL1Q3e7VxLrNZqP/disR4m20+nen4e+bjR4wvt/av8M5e0qDNVjO7sjGctlzC81/qVgw==", "license": "MIT", "dependencies": { - "@noble/hashes": "2.3.0" + "@noble/hashes": "2.4.0" }, "engines": { "node": ">=20.19.0" } }, "node_modules/@theqrl/qrl-cryptography": { - "version": "0.3.1", - "resolved": "https://registry.npmjs.org/@theqrl/qrl-cryptography/-/qrl-cryptography-0.3.1.tgz", - "integrity": "sha512-LqOWG5HbXFx19ABG4Eos0ExyLJpot1AOZcl//ZLWMRTJC/eqG6Xpmn94FuhahoLjmxnzP/XOfAxj0JfmbGcfJA==", + "version": "0.3.3", + "resolved": "https://registry.npmjs.org/@theqrl/qrl-cryptography/-/qrl-cryptography-0.3.3.tgz", + "integrity": "sha512-jdfGQrvrlkjz/YFf15aDEwb/2X436XaTlA+JYFcuKHDjpouHHKv8sbkPtPUpjB/b0y+VX2XoMZBwHhZt0UFwkQ==", "license": "MIT", "dependencies": { - "@noble/hashes": "2.3.0", - "@theqrl/mldsa87": "2.1.3" + "@noble/hashes": "2.4.0", + "@theqrl/mldsa87": "2.2.0" }, "engines": { "node": ">=20.19" } }, - "node_modules/@theqrl/qrl-cryptography/node_modules/@theqrl/mldsa87": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.1.3.tgz", - "integrity": "sha512-sQxeMZTeJG84v8lK8gRztuHHC2hB6RG2yWQc7oHv19lExG6vB4qvn8nk8/0ffseYXMqfqU5dmZ4jdabk9P3TEg==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0" - }, - "engines": { - "node": ">=20.19.0" - } - }, - "node_modules/@theqrl/qrl-cryptography/node_modules/@theqrl/mldsa87/node_modules/@noble/hashes": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz", - "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==", - "license": "MIT", - "engines": { - "node": ">= 20.19.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - } - }, "node_modules/@theqrl/wallet.js": { - "version": "6.2.4", - "resolved": "https://registry.npmjs.org/@theqrl/wallet.js/-/wallet.js-6.2.4.tgz", - "integrity": "sha512-rLA5VgIdyBSEOUdZpEKXtEZTrzWPeFHq0vr1FSP2a48EhMYtrCSl9t/C4VIlQsbE4elFONoVnWd0YUNflAwSnA==", + "version": "6.3.0", + "resolved": "https://registry.npmjs.org/@theqrl/wallet.js/-/wallet.js-6.3.0.tgz", + "integrity": "sha512-zTZsLIQKm4CaRAs4sfnalunVrFotxRIY6adwDCN01Ts55TrYn0qp8Jbs6Tv3/9cQDGJzEYszN1oIw49WcUActg==", "license": "MIT", "dependencies": { - "@noble/hashes": "2.2.0", - "@theqrl/mldsa87": "2.1.3" + "@noble/hashes": "2.4.0", + "@theqrl/mldsa87": "2.2.0" }, "engines": { "node": ">=20.19" } }, - "node_modules/@theqrl/wallet.js/node_modules/@noble/hashes": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz", - "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==", - "license": "MIT", - "engines": { - "node": ">= 20.19.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - } - }, - "node_modules/@theqrl/wallet.js/node_modules/@theqrl/mldsa87": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.1.3.tgz", - "integrity": "sha512-sQxeMZTeJG84v8lK8gRztuHHC2hB6RG2yWQc7oHv19lExG6vB4qvn8nk8/0ffseYXMqfqU5dmZ4jdabk9P3TEg==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0" - }, - "engines": { - "node": ">=20.19.0" - } - }, "node_modules/@theqrl/web3": { "version": "1.0.3", "resolved": "https://registry.npmjs.org/@theqrl/web3/-/web3-1.0.3.tgz", @@ -430,43 +381,6 @@ "node": ">=20.19.0" } }, - "node_modules/@theqrl/web3-qrl-abi/node_modules/@noble/hashes": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz", - "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==", - "license": "MIT", - "engines": { - "node": ">= 20.19.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - } - }, - "node_modules/@theqrl/web3-qrl-abi/node_modules/@theqrl/mldsa87": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.1.3.tgz", - "integrity": "sha512-sQxeMZTeJG84v8lK8gRztuHHC2hB6RG2yWQc7oHv19lExG6vB4qvn8nk8/0ffseYXMqfqU5dmZ4jdabk9P3TEg==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0" - }, - "engines": { - "node": ">=20.19.0" - } - }, - "node_modules/@theqrl/web3-qrl-abi/node_modules/@theqrl/wallet.js": { - "version": "6.2.3", - "resolved": "https://registry.npmjs.org/@theqrl/wallet.js/-/wallet.js-6.2.3.tgz", - "integrity": "sha512-1wQcPKDqtLpM5sn6NKEbn4UIJwZ9BWVqG1TbrW1zBRuw8NUaiejjDZQcKwoHrnNV3TQe9dJ1jnu+PLxq9LOqyw==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0", - "@theqrl/mldsa87": "2.1.3" - }, - "engines": { - "node": ">=20.19" - } - }, "node_modules/@theqrl/web3-qrl-accounts": { "version": "1.0.3", "resolved": "https://registry.npmjs.org/@theqrl/web3-qrl-accounts/-/web3-qrl-accounts-1.0.3.tgz", @@ -487,56 +401,6 @@ "node": ">=20.19.0" } }, - "node_modules/@theqrl/web3-qrl-accounts/node_modules/@noble/hashes": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz", - "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==", - "license": "MIT", - "engines": { - "node": ">= 20.19.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - } - }, - "node_modules/@theqrl/web3-qrl-accounts/node_modules/@theqrl/mldsa87": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.1.3.tgz", - "integrity": "sha512-sQxeMZTeJG84v8lK8gRztuHHC2hB6RG2yWQc7oHv19lExG6vB4qvn8nk8/0ffseYXMqfqU5dmZ4jdabk9P3TEg==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0" - }, - "engines": { - "node": ">=20.19.0" - } - }, - "node_modules/@theqrl/web3-qrl-accounts/node_modules/@theqrl/qrl-cryptography": { - "version": "0.3.0", - "resolved": "https://registry.npmjs.org/@theqrl/qrl-cryptography/-/qrl-cryptography-0.3.0.tgz", - "integrity": "sha512-2d7QcK/ZQKOmphnj0lSRJLyeXO3o0degg0mjEMHH+5g4LXvrgoVV1i/bTqzS78DgGRB4Mn3kUPXg6QW3KO712w==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0", - "@theqrl/mldsa87": "2.1.3" - }, - "engines": { - "node": ">=20.19" - } - }, - "node_modules/@theqrl/web3-qrl-accounts/node_modules/@theqrl/wallet.js": { - "version": "6.2.3", - "resolved": "https://registry.npmjs.org/@theqrl/wallet.js/-/wallet.js-6.2.3.tgz", - "integrity": "sha512-1wQcPKDqtLpM5sn6NKEbn4UIJwZ9BWVqG1TbrW1zBRuw8NUaiejjDZQcKwoHrnNV3TQe9dJ1jnu+PLxq9LOqyw==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0", - "@theqrl/mldsa87": "2.1.3" - }, - "engines": { - "node": ">=20.19" - } - }, "node_modules/@theqrl/web3-qrl-contract": { "version": "1.0.3", "resolved": "https://registry.npmjs.org/@theqrl/web3-qrl-contract/-/web3-qrl-contract-1.0.3.tgz", @@ -590,43 +454,6 @@ "node": ">=20.19.0" } }, - "node_modules/@theqrl/web3-qrl/node_modules/@noble/hashes": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz", - "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==", - "license": "MIT", - "engines": { - "node": ">= 20.19.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - } - }, - "node_modules/@theqrl/web3-qrl/node_modules/@theqrl/mldsa87": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.1.3.tgz", - "integrity": "sha512-sQxeMZTeJG84v8lK8gRztuHHC2hB6RG2yWQc7oHv19lExG6vB4qvn8nk8/0ffseYXMqfqU5dmZ4jdabk9P3TEg==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0" - }, - "engines": { - "node": ">=20.19.0" - } - }, - "node_modules/@theqrl/web3-qrl/node_modules/@theqrl/wallet.js": { - "version": "6.2.3", - "resolved": "https://registry.npmjs.org/@theqrl/wallet.js/-/wallet.js-6.2.3.tgz", - "integrity": "sha512-1wQcPKDqtLpM5sn6NKEbn4UIJwZ9BWVqG1TbrW1zBRuw8NUaiejjDZQcKwoHrnNV3TQe9dJ1jnu+PLxq9LOqyw==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0", - "@theqrl/mldsa87": "2.1.3" - }, - "engines": { - "node": ">=20.19" - } - }, "node_modules/@theqrl/web3-rpc-methods": { "version": "1.0.3", "resolved": "https://registry.npmjs.org/@theqrl/web3-rpc-methods/-/web3-rpc-methods-1.0.3.tgz", @@ -665,43 +492,6 @@ "node": ">=20.19.0" } }, - "node_modules/@theqrl/web3-utils/node_modules/@noble/hashes": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz", - "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==", - "license": "MIT", - "engines": { - "node": ">= 20.19.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - } - }, - "node_modules/@theqrl/web3-utils/node_modules/@theqrl/mldsa87": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.1.3.tgz", - "integrity": "sha512-sQxeMZTeJG84v8lK8gRztuHHC2hB6RG2yWQc7oHv19lExG6vB4qvn8nk8/0ffseYXMqfqU5dmZ4jdabk9P3TEg==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0" - }, - "engines": { - "node": ">=20.19.0" - } - }, - "node_modules/@theqrl/web3-utils/node_modules/@theqrl/qrl-cryptography": { - "version": "0.3.0", - "resolved": "https://registry.npmjs.org/@theqrl/qrl-cryptography/-/qrl-cryptography-0.3.0.tgz", - "integrity": "sha512-2d7QcK/ZQKOmphnj0lSRJLyeXO3o0degg0mjEMHH+5g4LXvrgoVV1i/bTqzS78DgGRB4Mn3kUPXg6QW3KO712w==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0", - "@theqrl/mldsa87": "2.1.3" - }, - "engines": { - "node": ">=20.19" - } - }, "node_modules/@theqrl/web3-validator": { "version": "1.0.3", "resolved": "https://registry.npmjs.org/@theqrl/web3-validator/-/web3-validator-1.0.3.tgz", @@ -718,43 +508,6 @@ "node": ">=20.19.0" } }, - "node_modules/@theqrl/web3-validator/node_modules/@noble/hashes": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz", - "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==", - "license": "MIT", - "engines": { - "node": ">= 20.19.0" - }, - "funding": { - "url": "https://paulmillr.com/funding/" - } - }, - "node_modules/@theqrl/web3-validator/node_modules/@theqrl/mldsa87": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/@theqrl/mldsa87/-/mldsa87-2.1.3.tgz", - "integrity": "sha512-sQxeMZTeJG84v8lK8gRztuHHC2hB6RG2yWQc7oHv19lExG6vB4qvn8nk8/0ffseYXMqfqU5dmZ4jdabk9P3TEg==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0" - }, - "engines": { - "node": ">=20.19.0" - } - }, - "node_modules/@theqrl/web3-validator/node_modules/@theqrl/qrl-cryptography": { - "version": "0.3.0", - "resolved": "https://registry.npmjs.org/@theqrl/qrl-cryptography/-/qrl-cryptography-0.3.0.tgz", - "integrity": "sha512-2d7QcK/ZQKOmphnj0lSRJLyeXO3o0degg0mjEMHH+5g4LXvrgoVV1i/bTqzS78DgGRB4Mn3kUPXg6QW3KO712w==", - "license": "MIT", - "dependencies": { - "@noble/hashes": "2.2.0", - "@theqrl/mldsa87": "2.1.3" - }, - "engines": { - "node": ">=20.19" - } - }, "node_modules/@types/node": { "version": "26.4.0", "resolved": "https://registry.npmjs.org/@types/node/-/node-26.4.0.tgz", diff --git a/package.json b/package.json index 2d76e57..bd3629b 100644 --- a/package.json +++ b/package.json @@ -22,13 +22,16 @@ "license": "GPL-3.0", "dependencies": { "@noble/hashes": "^2.3.0", - "@theqrl/mldsa87": "^2.1.4", - "@theqrl/qrl-cryptography": "^0.3.1", - "@theqrl/wallet.js": "^6.2.4", + "@theqrl/mldsa87": "^2.2.0", + "@theqrl/qrl-cryptography": "^0.3.3", + "@theqrl/wallet.js": "^6.3.0", "@theqrl/web3": "^1.0.3", "dotenv": "^17.4.2" }, "overrides": { + "@theqrl/mldsa87": "$@theqrl/mldsa87", + "@theqrl/qrl-cryptography": "$@theqrl/qrl-cryptography", + "@theqrl/wallet.js": "$@theqrl/wallet.js", "tmp": "^0.2.7", "follow-redirects": "^1.16.0", "ws": "^8.21.0"