[Snyk] Upgrade openpgp from 5.0.0-1 to 5.0.0

[snyk-bot]

Snyk has created this PR to upgrade openpgp from 5.0.0-1 to 5.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2021-09-02.

Release notes

Package name: openpgp

• 5.0.0 - 2021-09-02
  Read more
• 5.0.0-6 - 2021-08-20
  

  This is a prerelease of v5.0.0. The full changelog since OpenPGP.js v4 can be found here. The changelog since v5.0.0-5 is:

  • Add config.rejectCurves and prevent using and generating keys using blacklisted curves (#1395)
  • Set default config.minRSABits to 2047 (#1392)
  • Docs: clarify content of returned signatures value in openpgp.verify and decrypt (#1404)
• 5.0.0-5 - 2021-07-23
  

  This is a prerelease of v5.0.0. The full changelog since OpenPGP.js v4 can be found here. The changelog since v5.0.0-4 is:

  • Add security policy (#1388)
  • Throw on unrecognized configuration parameters in top-level functions (#1387)
  • Rename config.tolerant to config.ignoreUnsupportedPackets, add config.ignoreMalformedPackets (#1386)
  • TypeScript: add missing config options to the type definitions (#1385)
  • Update dependencies (#1383)
• 5.0.0-4 - 2021-07-20
  

  This is a prerelease of v5.0.0. The full changelog since OpenPGP.js v4 can be found here. The changelog since v5.0.0-3 is:

  • Fix various signature verification issues (#1302)
  • Uniform casing of subkey(s): rename the SubKey class to Subkey, and key.subKeys to key.subkeys (#1310)
  • CI: Check that JSDoc comments are valid (#1328)
  • CI: Detect unhandled rejections in browser tests (#1333) except in Safari 14.1 (#1371)
  • Require keys in openpgp.sign and make all top-level functions fully async (#1318)
  • Remove primaryKey argument from User methods, and rename User.sign to User.certify (#1329)
  • Always generate RSA keys of exact bit length (#1336)
  • Drop capabilities, keyID args in key.getExpirationTime() and consider direct-key signatures (#1319)
  • Add Signature#getSigningKeyIDs method to get Issuer Key IDs from a Signature (#1331)
  • Always throw on unexpected packets, but ignore Trust and Marker packets on parsing (#1340)
  • TypeScript: make the packets, keyPacket and mainKey properties readonly (#1337)
  • Simplify return value of generateKey, reformatKey and revokeKey and add support for binary output (#1345)
  • Support passing a non-array value to encryption/signingKeyIDs in top-level functions (#1342)
  • Support using key.isPrivate() for type inference, remove key.isPublic() (#1347)
  • Lint: enforce single quotes and do not error on class methods without this (#1341)
  • Remove valid and error from the verification result of openpgp.verify and decrypt, in favor of await verified (#1348)
  • Update README to use openpgp.readPrivateKey() where applicable (#1362)
  • Extend BaseStream<> from AsyncIterable<>, to enable the use of for await (chunk of result) on returned streams in TypeScript (#1373)
  • Replace armor option with format in openpgp.encrypt, sign and encryptSessionKey (#1354, #1377)
    • If format: 'armor' is passed (the default), an armored signed/encrypted message is returned (same as armor: true)
    • If format: 'binary' is passed, a binary signed/encrypted message is returned (same as armor: false in previous v5 prereleases)
    • If format: 'object' is passed, a Message or Signature object is returned (same as armor: false in v4)
  • Github: add issue templates (#1369)
  • Export Subkey class (#1381)
  • Update web-stream-tools, web-streams-polyfill and web-streams-adapter dependencies

  Examples

  Generate an armored key pair

  v5.0.0-3:

  import { generateKey } from 'openpgp';
  const { privateKeyArmored, publicKeyArmored, revocationCertificate } = await generateKey({ userIDs: [{ name: 'Test', email: 'test@email' }] });

  v5.0.0-4:

  import { generateKey } from 'openpgp';
  const { privateKey, publicKey, revocationCertificate } = await generateKey({ userIDs: [{ name: 'Test', email: 'test@email' }] });

  Generate a private key object

  v5.0.0-3:

  import { generateKey } from 'openpgp';
  const { key } = await generateKey({ userIDs: [{ name: 'Test', email: 'test@email' }] });

  v5.0.0-4:

  import { generateKey } from 'openpgp';
  const { key: privateKey } = await generateKey({ userIDs: [{ name: 'Test', email: 'test@email' }], format: 'object' });

  Encrypt and sign binary message (binary output)

  v5.0.0-3:

  import { createMessage, encrypt } from 'openpgp';
  const message = await createMessage({ binary: data });
  const encrypted = await encrypt({ encryptionKeys: publicKeys, signingKeys: privateKeys, message, armor: false });
  console.log(encrypted); // Uint8Array

  v5.0.0-4:

  import { createMessage, encrypt } from 'openpgp';
  const message = await createMessage({ binary: data });
  const encrypted = await encrypt({ encryptionKeys: publicKeys, signingKeys: privateKeys, message, format: 'binary' });
  console.log(encrypted); // Uint8Array

• 5.0.0-3 - 2021-05-28
  Read more
• 5.0.0-2 - 2021-04-27
  Read more
• 5.0.0-1 - 2021-03-03
  Read more

from openpgp GitHub release notes

Commit messages

Package name: openpgp

• acafb28 5.0.0
• 4f1c474 5.0.0-6
• a599638 Docs: clarify content of returned `signatures` value in `openpgp.verify` and `decrypt`
• 3fa778a Add `config.rejectCurves` and prevent generating keys using blacklisted algorithms (#1395)
• f57d352 Set default `config.minRSABits` to 2047 (#1392)
• f59b0de 5.0.0-5
• da60fa0 Add security policy (#1388)
• d9829fc Throw on unrecognised configuration in top-level functions (#1387)
• 4b6189b Rename `config.tolerant` to `config.ignoreUnsupportedPackets`, add `config.ignoreMalformedPackets` (#1386)
• 3cd61ff TypeScript: add missing `config` options to the type definitions (#1385)
• 7ebdd6a Update dependencies (#1383)
• 1837077 5.0.0-4
• 5e99760 Update web-stream-tools
• 85d129a Export Subkey class (#1381)
• 1ac71a9 Github: add ISSUE_TEMPLATES (#1369)
• b604458 Rename `format: 'armor'` option to `format: 'armored'` in top-level functions (#1377)
• ce70484 Replace `armor` option with `format` in `openpgp.encrypt`, `sign` and `encryptSessionKey` (#1354)
• 53f54e1 Extend BaseStream<> from AsyncIterable<> (#1373)
• e450582 Update README to use `openpgp.readPrivateKey()` where applicable (#1362)
• 3886358 Remove `valid` and `error` from the verification result of `openpgp.verify` and `decrypt` (#1348)
• ed8db3d CI: Ignore unhandled rejections in tests in Safari 14.1 (#1371)
• ab22fe8 Lint: enforce single quotes and do not error on class methods without `this` (#1341)
• d238a02 Support using `Key.isPrivate()` for type inference, remove `Key.isPublic()` (#1347)
• f50abd8 Support passing a non-array value to `encryption/signingKeyIDs` in top-level functions (#1342)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs