[Snyk] Upgrade tweetnacl from 1.0.1 to 1.0.3

[cleancoindev]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade tweetnacl from 1.0.1 to 1.0.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 2 years ago, on 2020-02-10.

Release notes

Package name: tweetnacl

• 1.0.3 - 2020-02-10
  

  IMPORTANT BUG FIX. Due to a bug in calculating carry in
  modulo reduction that used bit operations on integers larger than
  32 bits, nacl.sign or nacl.sign.detached could have created
  incorrect signatures.

  This only affects signing, not verification.

  Thanks to @ valerini on GitHub for finding and reporting the bug.

• 1.0.2 - 2020-01-16
  

  Exported more internal undocumented functions for
  third-party projects that rely on low-level interface,
  (something users of TweetNaCl shouldn't care about).

• 1.0.1 - 2019-01-24
  
  • Fixed TypeScript typings (#157)
  • Rebuilt using newer version of Uglify-js.

from tweetnacl GitHub release notes

Commit messages

Package name: tweetnacl

• 5bf1ff5 1.0.3
• a9299eb Update changelog
• af1919c Merge pull request V2 Multisig is failing to sign transactions created with transaction builder algorand/js-algorand-sdk#188 from dchest/modl-fix
• 71df1d6 Fix modL
• 73a94a2 1.0.2
• 1b61c87 Update changelog for 1.0.1 and 1.0.2
• eedab65 Rebuild minified versions
• 4203331 Update dev deps
• d501368 Merge pull request Implement @unit.responses responses test algorand/js-algorand-sdk#185 from kevinlewi/expose_lowlevel_functions
• 8252787 Expose more nacl.lowlevel functions
• da75d9e crypto_sign_open: remove useless variable
• 60316da Merge pull request Add the ability to convert between Buffer and Transaction object algorand/js-algorand-sdk#176 from DanielRuf/fix/remove-useless-assignment
• d6f64d2 Merge branch 'master' of github.com:dchest/tweetnacl-js
• 57fe3c4 Update dev dependencies
• b2c2954 Merge pull request Sending a transaction group does not work when merging transaction.Transaction with raw transaction algorand/js-algorand-sdk#178 from mvasilkov/patch-1
• db1954d README: Fix dead link
• 41a4afe Remove useless assignment
• 7d86aff README: removed Peerio from notable users
• 65bc6e9 Merge pull request Algod v2 API - client.js - HTTPClient method Get - wrong Accept algorand/js-algorand-sdk#173 from Alexendoo/patch-1
• 32d8cc7 Add GitHub to notable users
• 3e4e6ac Update dev deps
• 7d88326 Fix linting issues
• 0b07a6e Update dev dependencies

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs