[Snyk] Upgrade @metamask/eth-sig-util from 4.0.0 to 4.0.1

[vyomshm]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @metamask/eth-sig-util from 4.0.0 to 4.0.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 2 years ago, on 2022-04-21.

Release notes

Package name: @metamask/eth-sig-util

• 4.0.1 - 2022-04-21
  

  Fixed

  • Fix mistake in TYPED_MESSAGE_SCHEMA (#243)
    • The schema changed in v4 in a way that accidentally disallowed "reference types" (i.e. custom types) apart from the primary type. Reference types are now once again allowed.
• 4.0.0 - 2021-09-22
  

  Added

  • BREAKING: Add subpath exports (#214, #211)
    • This is breaking because it prevents the import of modules that are not exposed as subpath exports.
  • Add salt to the EIP-712 domain type (#176)
  • Add additional unit tests (#146, #164, #167, #169, #172, #177, #180, #170, #171, #178, #173, #182, #184, #185, #187)
  • Improve documentation (#157, #177, #174, #180, #178, #181, #186, #212, #207, #213)

  Changed

  • BREAKING: Consolidate signTypedData and recoverTypedSignature functions (#156)
    • The functions signTypedDataLegacy, signTypedData, and signTypedData_v4 have been replaced with a single signTypedData function with a version parameter. The version parameter determines which type of signature you get.
      • If you used signTypedDataLegacy, switch to signTypedData with the version V1.
      • If you used signTypedData, switch to signTypedData with the version V3.
      • If you used signTypedData_v4, switch to signTypedData with the version V4.
    • The functions recoverTypedSignatureLegacy, recoverTypedSignature, and recoverTypedSignature_v4 have been replaced with a single recoverTypedSignature function.
      • If you used recoverTypedSignatureLegacy, switch to recoverTypedMessage with the version V1.
      • If you used recoverTypedMessage, switch to recoverTypedMessage with the version V3.
      • If you used recoverTypedSignature_v4, switch to recoverTypedMessage with the version V4.
  • BREAKING: Rename TypedDataUtils.sign to TypedDataUtils.eip712Hash (#104)
    • This function never actually signed anything. It just created a hash that was later signed. The new name better reflects what the function does.
  • BREAKING: Move package under @ metamask npm organization (#162)
    • Update your require and import statements to import @ metamask/eth-sig-util rather than eth-sig-util.
  • BREAKING: Simplify function type signatures (#198)
    • This is only a breaking change for TypeScript projects that were importing types used by the function signatures. The types should be far simpler now.
    • The TypedData has been updated to be more restrictive (it only allows valid typed data now), and it was renamed to TypedDataV1
  • BREAKING: Replace MsgParams parameters with "options" parameters (#204)
    • This affects the following functions:
      • personalSign
      • recoverPersonalSignature
      • extractPublicKey
      • encrypt
      • encryptSafely
      • decrypt
      • decryptSafely
      • signTypedData
      • recoverTypedSignature
    • All parameters are passed in as a single "options" object now, instead of the MsgParams type that was used for most of these functions previously. Read each function signature carefully to ensure you are correctly passing in parameters.
    • personalSign example:
      • Previously it was called like this: personalSign(privateKey, { data })
      • Now it is called like this: personalSign({ privateKey, data })
  • BREAKING: Rename Version type to SignTypedDataVersion (#218)
  • BREAKING: Rename EIP712TypedData type to TypedDataV1Field (#218)
  • Add signTypedData version validation (#201)
  • Add validation to check that parameters aren't nullish (#205)
  • Enable inline sourcemaps (#159)
  • Update ethereumjs-util to v6 (#138, #195)
  • Allow TypedDataUtils functions to be called unbound (#152)
  • Update minimum tweetnacl-util version (#155)
  • Add Solidity types to JSON schema for signTypedData (#189)
  • Replace README API docs with generated docs (#213)

from @metamask/eth-sig-util GitHub release notes

Commit messages

Package name: @metamask/eth-sig-util

• 219511e 4.0.1 (#247)
• 7d4e621 Fix typed message schema mistake (#243)
• 94a679e Bump ajv from 6.12.0 to 6.12.6 (#240)
• d41812c Bump minimist from 1.2.5 to 1.2.6 (#237)
• 73ace33 Update ESLint config from v7 to v9 (#220)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs