Skip to content

Comments

Bump nostr-tools from 1.17.0 to 2.10.4#36

Open
dependabot[bot] wants to merge 16 commits intomasterfrom
dependabot/npm_and_yarn/nostr-tools-2.10.4
Open

Bump nostr-tools from 1.17.0 to 2.10.4#36
dependabot[bot] wants to merge 16 commits intomasterfrom
dependabot/npm_and_yarn/nostr-tools-2.10.4

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 10, 2025

Bumps nostr-tools from 1.17.0 to 2.10.4.

Release notes

Sourced from nostr-tools's releases.

v2.0.0

The "core" API has been modified to be simpler, but it didn't really change much since there wasn't much to change. Most names were changed though. Deprecated methods were removed. The <number> type parameter on Event was removed (sorry @​alexgleason) and kinds are not enums anymore, they are just constants in the nostr-tools/kinds module.

Ability to import individual modules has been introduced (thanks to @​fr4nzap) (technically I think it was already released but doesn't matter), which will lead to much less bloated bundles when you just want a small piece of functionality.

The relay.ts and pool.ts modules were rewritten from scratch with no regards for backwards compatibility, but most of the actual functionality was kept (a notable exception were the batched requests from @​sepehr-safari). Their code is more solid and simpler to read and understand now now and makes less compromises.

Ability to use this module optionally with nostr-wasm was introduced.

Some other NIP helpers were introduced, like NIP-11 and some other I forgot. But more will come soon now.

Upgrade guide

  • keys.ts and event.ts files were merged into a single pure.ts module -- which is equivalent to wasm.ts
  • generatePrivateKey() was renamed to generateSecretKey() and now returns a Uint8Array instead of a hex string;
  • getPublicKey() now takes a Uint8Array instead of a hex string, it still returns a public as a hex string though;
  • finishEvent() was renamed to finalizeEvent() and now takes a Uint8Array secret key instead of a hex string;
  • nip19.nsecEncode() also expects a Uint8Array now and nip19.decode() returns a Uint8Array when it finds an nsec;
  • There are too many changes in nostr-tools/relay and nostr-tools/pool, so I won't write them here.

Thank you for your patience.

Commits
  • 43ce7f9 fix reference to nostr-wasm dependency so it can be installed on deno.
  • 5a55c67 nip10: fix.
  • bf0c4d4 nip10: improve, support quotes, author hints, change the way legacy refs are ...
  • 50fe7c2 streamline jsr publishes.
  • 29270c8 nip46: fix legacyDecrypt argument.
  • cb29d62 add links to jsr.io
  • 0d23740 fix lint error.
  • 659ad36 nip05: use stub to test queryProfile().
  • d062ab8 make publish() timeout.
  • 94f841f Fix fetch to work in the edge and node environments, cleanup type issues
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot bot and others added 16 commits May 1, 2024 09:57
Bumps [tar](https://github.com/isaacs/node-tar) from 6.2.0 to 6.2.1.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.0...v6.2.1)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [eslint](https://github.com/eslint/eslint) from 8.57.0 to 9.19.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.57.0...v9.19.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [nostr-tools](https://github.com/nbd-wtf/nostr-tools) from 1.17.0 to 2.10.4.
- [Release notes](https://github.com/nbd-wtf/nostr-tools/releases)
- [Commits](nbd-wtf/nostr-tools@v1.17.0...v2.10.4)

---
updated-dependencies:
- dependency-name: nostr-tools
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 10, 2025
@vercel
Copy link

vercel bot commented Feb 10, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
x-barkar-dev ❌ Failed (Inspect) Feb 10, 2025 0:20am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant