fix(deps): update dependency @noble/hashes to v1.8.0

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Confidence
@noble/hashes (source)	1.7.1 -> 1.8.0

---

Release Notes

paulmillr/noble-hashes (@​noble/hashes)

v1.8.0

Compare Source

Preparation for v2

The release contains bugfixes and a few improvements which pave the way for upcoming v2.0.

• Modules are now available with .js extension
  • Old: @noble/hashes/sha2
  • New: @noble/hashes/sha2.js
  • Old path is still available
  • This simplifies working in browsers natively without transpilers
• Refactor core functionality, remove duplicate code
• Decrease package size

Deprecations

In v2, some modules will be removed. For example, sha256 will become sha2. In v1.8, the old names still exist, but are marked as deprecated, to simplify upgrade path.

One of the reasons for moving those was the fact sha384 resided in sha512, sha224 in sha256 - which was confusing. New naming scheme simplifies reasoning and decreases amount of modules.

• sha256 became sha2 (which already existed for several releases)
• sha512 became sha2
• _assert became utils
• blake2b became blake2
• blake2s became blake2
• ripemd160 became legacy (to signify its low security level 2^80)
• sha1 became legacy

Full Changelog: https://github.com/paulmillr/noble-hashes/compare/1.7.2...1.8.0

v1.7.2

Compare Source

• legacy: new module, with md5 hash
• sha1: move to legacy, keep old alias until major release
• utils: randomBytes should ensure Uint8Array output for old node.js versions
• utils: use built-in Uint8Array toHex / fromHex when available. Gives 13x speed-up on 256b arrays, 20x speed-up on 32kb arrays
• Typescript source can now be used without compilation in node.js v24, due to erasableSyntaxOnly

Full Changelog: https://github.com/paulmillr/noble-hashes/compare/1.7.1...1.7.2

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security[bot]]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​noble/​hashes@​1.8.0

View full report