WebAssembly wrapper of the rage encryption library

Last update: Dec 16, 2022

Related tags

Overview

rage-wasm: WebAssembly wrapper of rage

rage is a simple, modern, and secure file encryption tool, using the age format. It features small explicit keys, no config options, and UNIX-style composability.

The format specification is at age-encryption.org/v1. To discuss the spec or other age related topics, please email the mailing list at [email protected]. age was designed by @Benjojo12 and @FiloSottile.

This package is a WebAssembly wrapper of the Rust rage package, providing basic encryption and descryption operations.

🚴 Usage

🐑 Use NPM or Yarn to install the package

npm install @kanru/rage-wasm

🛠️ Build with `wasm-pack build`

wasm-pack build

🔬 Test in Headless Browsers with `wasm-pack test`

wasm-pack test --headless --firefox

🎁 Publish to NPM with `wasm-pack publish`

wasm-pack publish

Comments

Usage instructions? can't use

hey, trying to use this library and having problems

I tried running with node v16 and tried from an mjs file:

tried import:

import rage from '@kanru/rage-wasm';

got this:

Error: Cannot find module '@kanru/rage-wasm'

tried require

const rage = require('@kanru/rage-wasm');

and tried this in typescript

import rage from '@kanru/rage-wasm/dist/index.js';

got this:

export { decrypt_with_user_passphrase$1 as decrypt_with_user_passphrase, decrypt_with_x25519$1 as decrypt_with_x25519, encrypt_with_user_passphrase$1 as encrypt_with_user_passphrase, encrypt_with_x25519$1 as encrypt_with_x25519, keygen$1 as keygen };
^^^^^^
SyntaxError: Unexpected token 'export'

I managed to configure typescript to compile the index.js file (not sure exactly which combination of tsconfig settings led to this), after which I got this neat error:

TypeError: Cannot assign to read only property 'keygen' of object '[object Object]'

also, I'm assuming the wasm-pack build step is for development, not for end users? I don't see that binary anywhere int the npm lib.

Thanks

documentation

opened by Madd0g 3

Unable to decrypt data that wasn't encrypted with rage-wasm
I set up a browser test doing a simple decryption as described in this project's javascript unit test. When I tried to decrypt data that was encrypted at the command line with age, I get a decryption error. I verified that I was able to decrypt the same data at the command line with both age and rage.

My test case was essentially:

age-keygen >key.txt age -e -a -i key.txt -o encrypted.txt

const secret_key = '<pasted from key.txt>'; const encrypted_data = '<pasted from encrypted.txt>'; console.log(decode(await decrypt_with_x25519(secret_key, encode(encrypted_data))));

Where encode and decode are copied from ./tests/all.test.js.

If I use the same key in key.txt to both encrypt and then decrypt with rage-wasm, it works, but if it's encrypted at the command line, it desn't seem to be possible to decrypt it with rage-wasm.

In case it matters, I'm running my test in a vanilla javascript app using vite to build. I can provide a full reproduction, if needed.

Edit: I verified that keys generated with rage-wasm and data encrypted with that key can be decrypted at the command line with both age and rage.
opened by jmcantrell 1
build(deps): bump ansi-html and parcel in /examples/parcel
Removes ansi-html. It's no longer used after updating ancestor dependency parcel. These dependencies need to be updated together.

Removes ansi-html

Updates parcel from 2.0.0-rc.0 to 2.7.0

Release notes

Sourced from parcel's releases.

v2.7.0

Added

Core

Log resolved targets in verbose log level for debugging - Details

Allow plugin configs to be written with .cjs extension - Details

JavaScript

Support react refresh for @emotion/react - Details

Inject script for hmr when there is only normal script in html - Details

Elm

Add support for compiling multiple modules at once via with query param - Details

CSS

Add support for errorRecovery option in @parcel/transformer-css - Details

Experimental bundler - Details

Implement bundling for multiple targets

Internalize async dependencies

Merge bundles of the same type

Fix missing module - Details

Fixed

JavaScript

Default interop missing when importing a CommonJS module - Details

Add missing imports for external dependencies in skipped assets - Details

Bump SWC to fix undefined variables - Details

Remove charset from JS loaded script to avoid double fetching in Firefox - Details

Use placeholder expression when replacing unused symbols - Details

Core

Fix atomic writestream handling on Windows - Details

Fix non-deterministic bundle hashes between builds due to symbol propagation - Details

Fix TypeScript types for @parcel/package-manager - Details

Dependencies

Bump terser to 5.14.2 - Details

Bump node-forge to 1.3.0 - Details

v2.6.2

This release includes bug fixes:

Core

Fix race condition between writing and reading from cache - Details

v2.6.1

This release includes bug fixes:

JavaScript

Fix issue with conditional dependencies based on process.env - Details

Fix transformation of import/requires wrapped into Promise.resolve() - Details

Fix object literal shorthand with imported variables - Details

Fix imported values in computed optional member expressions - Details

Bump SWC to fix issue with missing parenthesis in optional chaining call - Details

... (truncated)

Changelog

Sourced from parcel's changelog.

[2.7.0] - 2022-08-03

Added

Core

Log resolved targets in verbose log level for debugging - Details

Allow plugin configs to be written with .cjs extension - Details

JavaScript

Support react refresh for @emotion/react - Details

Inject script for hmr when there is only normal script in html - Details

Elm

Add support for compiling multiple modules at once via with query param - Details

CSS

Add support for errorRecovery option in @parcel/transformer-css - Details

Experimental bundler - Details

Implement bundling for multiple targets

Internalize async dependencies

Merge bundles of the same type

Fix missing module - Details

Fixed

JavaScript

Default interop missing when importing a CommonJS module - Details

Add missing imports for external dependencies in skipped assets - Details

Bump SWC to fix undefined variables - Details

Remove charset from JS loaded script to avoid double fetching in Firefox - Details

Use placeholder expression when replacing unused symbols - Details

Core

Fix atomic writestream handling on Windows - Details

Fix non-deterministic bundle hashes between builds due to symbol propagation - Details

Fix TypeScript types for @parcel/package-manager - Details

Dependencies

Bump terser to 5.14.2 - Details

Bump node-forge to 1.3.0 - Details

[2.6.2] - 2022-06-21

Fixed

Core

Fix race condition between writing and reading from cache - Details

[2.6.1] - 2022-06-17

Fixed

JavaScript

Fix issue with conditional dependencies based on process.env - Details

Fix transformation of import/requires wrapped into Promise.resolve() - Details

... (truncated)

Commits

5f095fd v2.7.0

000d332 Changelog for v2.7.0

1a96d6d Use placeholder expression when replacing unused symbols (#8358)

a22164c Lint (#8359)

9012616 Add support for errorRecovery option in @parcel/transformer-css (#8352)

56e621e VS Code Extension for Parcel (#8139)

fca5c8c Add multi module compilation for elm (#8076)

128e072 Bump terser from 5.7.2 to 5.14.2 (#8322)

565e5f0 Bump node-forge from 1.2.1 to 1.3.0 (#8271)

085a7aa allow cjs config files on type module projects (#8253)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
build(deps): bump follow-redirects from 1.14.2 to 1.15.2 in /examples/parcel
Bumps follow-redirects from 1.14.2 to 1.15.2.

Commits

9655237 Release version 1.15.2 of the npm package.

6e2b86d Default to localhost if no host given.

449e895 Throw invalid URL error on relative URLs.

e30137c Use type functions.

76ea31f ternary operator syntax fix

84c00b0 HTTP header lines are separated by CRLF.

d28bcbf Create SECURITY.md (#202)

62a551c Release version 1.15.1 of the npm package.

7fe0779 Use for ... of.

948c30c Fix redirecting to relative URL when using proxy

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
build(deps): bump node-forge and parcel in /examples/parcel
Bumps node-forge and parcel. These dependencies needed to be updated together. Removes node-forge Updates parcel from 2.0.0-rc.0 to 2.7.0

Release notes

Sourced from parcel's releases.

v2.7.0

Added

Core

Log resolved targets in verbose log level for debugging - Details

Allow plugin configs to be written with .cjs extension - Details

JavaScript

Support react refresh for @emotion/react - Details

Inject script for hmr when there is only normal script in html - Details

Elm

Add support for compiling multiple modules at once via with query param - Details

CSS

Add support for errorRecovery option in @parcel/transformer-css - Details

Experimental bundler - Details

Implement bundling for multiple targets

Internalize async dependencies

Merge bundles of the same type

Fix missing module - Details

Fixed

JavaScript

Default interop missing when importing a CommonJS module - Details

Add missing imports for external dependencies in skipped assets - Details

Bump SWC to fix undefined variables - Details

Remove charset from JS loaded script to avoid double fetching in Firefox - Details

Use placeholder expression when replacing unused symbols - Details

Core

Fix atomic writestream handling on Windows - Details

Fix non-deterministic bundle hashes between builds due to symbol propagation - Details

Fix TypeScript types for @parcel/package-manager - Details

Dependencies

Bump terser to 5.14.2 - Details

Bump node-forge to 1.3.0 - Details

v2.6.2

This release includes bug fixes:

Core

Fix race condition between writing and reading from cache - Details

v2.6.1

This release includes bug fixes:

JavaScript

Fix issue with conditional dependencies based on process.env - Details

Fix transformation of import/requires wrapped into Promise.resolve() - Details

Fix object literal shorthand with imported variables - Details

Fix imported values in computed optional member expressions - Details

Bump SWC to fix issue with missing parenthesis in optional chaining call - Details

... (truncated)

Changelog

Sourced from parcel's changelog.

[2.7.0] - 2022-08-03

Added

Core

Log resolved targets in verbose log level for debugging - Details

Allow plugin configs to be written with .cjs extension - Details

JavaScript

Support react refresh for @emotion/react - Details

Inject script for hmr when there is only normal script in html - Details

Elm

Add support for compiling multiple modules at once via with query param - Details

CSS

Add support for errorRecovery option in @parcel/transformer-css - Details

Experimental bundler - Details

Implement bundling for multiple targets

Internalize async dependencies

Merge bundles of the same type

Fix missing module - Details

Fixed

JavaScript

Default interop missing when importing a CommonJS module - Details

Add missing imports for external dependencies in skipped assets - Details

Bump SWC to fix undefined variables - Details

Remove charset from JS loaded script to avoid double fetching in Firefox - Details

Use placeholder expression when replacing unused symbols - Details

Core

Fix atomic writestream handling on Windows - Details

Fix non-deterministic bundle hashes between builds due to symbol propagation - Details

Fix TypeScript types for @parcel/package-manager - Details

Dependencies

Bump terser to 5.14.2 - Details

Bump node-forge to 1.3.0 - Details

[2.6.2] - 2022-06-21

Fixed

Core

Fix race condition between writing and reading from cache - Details

[2.6.1] - 2022-06-17

Fixed

JavaScript

Fix issue with conditional dependencies based on process.env - Details

Fix transformation of import/requires wrapped into Promise.resolve() - Details

... (truncated)

Commits

5f095fd v2.7.0

000d332 Changelog for v2.7.0

1a96d6d Use placeholder expression when replacing unused symbols (#8358)

a22164c Lint (#8359)

9012616 Add support for errorRecovery option in @parcel/transformer-css (#8352)

56e621e VS Code Extension for Parcel (#8139)

fca5c8c Add multi module compilation for elm (#8076)

128e072 Bump terser from 5.7.2 to 5.14.2 (#8322)

565e5f0 Bump node-forge from 1.2.1 to 1.3.0 (#8271)

085a7aa allow cjs config files on type module projects (#8253)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
build(deps): bump ejs and parcel in /examples/parcel
Bumps ejs and parcel. These dependencies needed to be updated together. Removes ejs Updates parcel from 2.0.0-rc.0 to 2.7.0

Release notes

Sourced from parcel's releases.

v2.7.0

Added

Core

Log resolved targets in verbose log level for debugging - Details

Allow plugin configs to be written with .cjs extension - Details

JavaScript

Support react refresh for @emotion/react - Details

Inject script for hmr when there is only normal script in html - Details

Elm

Add support for compiling multiple modules at once via with query param - Details

CSS

Add support for errorRecovery option in @parcel/transformer-css - Details

Experimental bundler - Details

Implement bundling for multiple targets

Internalize async dependencies

Merge bundles of the same type

Fix missing module - Details

Fixed

JavaScript

Default interop missing when importing a CommonJS module - Details

Add missing imports for external dependencies in skipped assets - Details

Bump SWC to fix undefined variables - Details

Remove charset from JS loaded script to avoid double fetching in Firefox - Details

Use placeholder expression when replacing unused symbols - Details

Core

Fix atomic writestream handling on Windows - Details

Fix non-deterministic bundle hashes between builds due to symbol propagation - Details

Fix TypeScript types for @parcel/package-manager - Details

Dependencies

Bump terser to 5.14.2 - Details

Bump node-forge to 1.3.0 - Details

v2.6.2

This release includes bug fixes:

Core

Fix race condition between writing and reading from cache - Details

v2.6.1

This release includes bug fixes:

JavaScript

Fix issue with conditional dependencies based on process.env - Details

Fix transformation of import/requires wrapped into Promise.resolve() - Details

Fix object literal shorthand with imported variables - Details

Fix imported values in computed optional member expressions - Details

Bump SWC to fix issue with missing parenthesis in optional chaining call - Details

... (truncated)

Changelog

Sourced from parcel's changelog.

[2.7.0] - 2022-08-03

Added

Core

Log resolved targets in verbose log level for debugging - Details

Allow plugin configs to be written with .cjs extension - Details

JavaScript

Support react refresh for @emotion/react - Details

Inject script for hmr when there is only normal script in html - Details

Elm

Add support for compiling multiple modules at once via with query param - Details

CSS

Add support for errorRecovery option in @parcel/transformer-css - Details

Experimental bundler - Details

Implement bundling for multiple targets

Internalize async dependencies

Merge bundles of the same type

Fix missing module - Details

Fixed

JavaScript

Default interop missing when importing a CommonJS module - Details

Add missing imports for external dependencies in skipped assets - Details

Bump SWC to fix undefined variables - Details

Remove charset from JS loaded script to avoid double fetching in Firefox - Details

Use placeholder expression when replacing unused symbols - Details

Core

Fix atomic writestream handling on Windows - Details

Fix non-deterministic bundle hashes between builds due to symbol propagation - Details

Fix TypeScript types for @parcel/package-manager - Details

Dependencies

Bump terser to 5.14.2 - Details

Bump node-forge to 1.3.0 - Details

[2.6.2] - 2022-06-21

Fixed

Core

Fix race condition between writing and reading from cache - Details

[2.6.1] - 2022-06-17

Fixed

JavaScript

Fix issue with conditional dependencies based on process.env - Details

Fix transformation of import/requires wrapped into Promise.resolve() - Details

... (truncated)

Commits

5f095fd v2.7.0

000d332 Changelog for v2.7.0

1a96d6d Use placeholder expression when replacing unused symbols (#8358)

a22164c Lint (#8359)

9012616 Add support for errorRecovery option in @parcel/transformer-css (#8352)

56e621e VS Code Extension for Parcel (#8139)

fca5c8c Add multi module compilation for elm (#8076)

128e072 Bump terser from 5.7.2 to 5.14.2 (#8322)

565e5f0 Bump node-forge from 1.2.1 to 1.3.0 (#8271)

085a7aa allow cjs config files on type module projects (#8253)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
build(deps): bump terser from 5.7.2 to 5.15.0 in /examples/parcel
Bumps terser from 5.7.2 to 5.15.0.

Changelog

Sourced from terser's changelog.

v5.15.0

Basic support for ES2022 class static initializer blocks.

Add AudioWorkletNode constructor options to domprops list (#1230)

Make identity function inliner not inline id(...expandedArgs)

v5.14.2

Security fix for RegExps that should not be evaluated (regexp DDOS)

Source maps improvements (#1211)

Performance improvements in long property access evaluation (#1213)

v5.14.1

keep_numbers option added to TypeScript defs (#1208)

Fixed parsing of nested template strings (#1204)

v5.14.0

Switched to @jridgewell/source-map for sourcemap generation (#1190, #1181)

Fixed source maps with non-terminated segments (#1106)

Enabled typescript types to be imported from the package (#1194)

Extra DOM props have been added (#1191)

Delete the AST while generating code, as a means to save RAM

v5.13.1

Removed self-assignments (varname=varname) (closes #1081)

Separated inlining code (for inlining things into references, or removing IIFEs)

Allow multiple identifiers with the same name in var destructuring (eg var { a, a } = x) (#1176)

v5.13.0

All calls to eval() were removed (#1171, #1184)

source-map was updated to 0.8.0-beta.0 (#1164)

NavigatorUAData was added to domprops to avoid property mangling (#1166)

v5.12.1

Fixed an issue with function definitions inside blocks (#1155)

Fixed parens of new in some situations (closes #1159)

v5.12.0

TERSER_DEBUG_DIR environment variable

@copyright comments are now preserved with the comments="some" option (#1153)

v5.11.0

Unicode code point escapes (\u{abcde}) are not emitted inside RegExp literals anymore (#1147)

acorn is now a regular dependency

v5.10.0

... (truncated)

Commits

13fe8ca 5.15.0

d397f55 update changelog

c677e28 basic support for class static blocks. Closes #1093

5ca7d86 fix (domprops): add AudioWorkletNode params to the domprops list (#1230)

ea5dcc3 avoid inlining identityFn(...expandedArgs). closes #1226

0136e8a update changelog

c5cb19d 5.14.2

a4da734 fix potential regexp DDOS

839b81b Add source mapping for closing } (#1211)

645a092 Optimize property access evaluation (#1213)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
build(deps): bump zeroize_derive from 1.1.0 to 1.3.2
Bumps zeroize_derive from 1.1.0 to 1.3.2.

Changelog

Sourced from zeroize_derive's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

1.5.5 (2022-04-30)

Added

Impl Zeroize for std::ffi::CString (#759)

AsRef<T> and AsMut<T> impls for Zeroizing (#761)

#759: RustCrypto/utils#759 #761: RustCrypto/utils#761

1.5.4 (2022-03-16)

Added

Nightly-only upport for zeroizing ARM64 SIMD registers (#749)

#749: RustCrypto/utils#749

1.5.3 (2022-02-25)

Fixed

Deriving ZeroizeOnDrop on DerefMut (#739)

#739: RustCrypto/utils#739

1.5.2 (2022-01-31) [YANKED]

Fixed

Ambiguous method for AssertZeroizeOnDrop (#725)

#725: RustCrypto/utils#725

1.5.1 (2022-01-27) [YANKED]

Fixed

Double mut on AssertZeroizeOnDrop (#719)

#719: RustCrypto/utils#719

1.5.0 (2022-01-14) [YANKED]

Added

Zeroize impls for PhantomData, PhantomPinned, and tuples with 0-10 elements (#660)

#[zeroize(bound = "T: MyTrait")] (#663)

ZeroizeOnDrop trait and custom derive (#699, #700, #703)

#660: RustCrypto/utils#660 #663: RustCrypto/utils#663 #699: RustCrypto/utils#699 #700: RustCrypto/utils#700 #703: RustCrypto/utils#703

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies rust
opened by dependabot[bot] 1
build(deps): bump minimist from 1.2.5 to 1.2.6 in /examples/parcel
Bumps minimist from 1.2.5 to 1.2.6.

Commits

7efb22a 1.2.6

ef88b93 security notice for additional prototype pollution issue

c2b9819 isConstructorOrProto adapted from PR

bc8ecee test from prototype pollution PR

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
build(deps): bump nanoid from 3.1.25 to 3.3.4 in /examples/parcel
Bumps nanoid from 3.1.25 to 3.3.4.

Changelog

Sourced from nanoid's changelog.

3.3.4

Fixed --help in CLI (by @Lete114).

3.3.3

Reduced size (by Anton Khlynovskiy).

3.3.2

Fixed enhanced-resolve support.

3.3.1

Reduced package size.

3.3

Added size argument to function from customAlphabet (by Stefan Sundin).

3.2

Added --size and --alphabet arguments to binary (by Vitaly Baev).

3.1.32

Reduced async exports size (by Artyom Arutyunyan).

Moved from Jest to uvu (by Vitaly Baev).

3.1.31

Fixed collision vulnerability on object in size (by Artyom Arutyunyan).

3.1.30

Reduced size for project with brotli compression (by Anton Khlynovskiy).

3.1.29

Reduced npm package size.

3.1.28

Reduced npm package size.

3.1.27

Cleaned dependencies from development tools.

3.1.26

Improved performance (by Eitan Har-Shoshanim).

Reduced npm package size.

Commits

fc5bd0d Release 3.3.4 version

5ae2628 Update dependencies

2f48e9c Try to fix CI

85991e3 fix: CLI help examples (#361)

89d994c Update dependencies

00547e7 Fix benchmark order

a8f4099 bench: add back @napi-rs/uuid (#360)

acd897f Added postgres extension to various README files (#359)

772a613 Update CI and dependencies

e7aeb0f Added zig-nanoid to readme. (#357)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
build(deps): bump follow-redirects from 1.14.2 to 1.14.9 in /examples/parcel
Bumps follow-redirects from 1.14.2 to 1.14.9.

Commits

13136e9 Release version 1.14.9 of the npm package.

2ec9b0b Keep headers when upgrading from HTTP to HTTPS.

5fc74dd Reduce nesting.

3d81dc3 Release version 1.14.8 of the npm package.

62e546a Drop confidential headers across schemes.

2ede36d Release version 1.14.7 of the npm package.

8b347cb Drop Cookie header across domains.

6f5029a Release version 1.14.6 of the npm package.

af706be Ignore null headers.

d01ab7a Release version 1.14.5 of the npm package.

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1

Releases(v0.3.0)

v0.3.0(Sep 22, 2022)
Added

Dependencies are partially audited and documented with cargo-vet

Changed

Removed cog.toml and adopted Keep a Changelog format.

Removed unmaintained dependency wee_alloc. Default allocator will be used.

Added shadow-cljs example

Download from https://www.npmjs.com/package/@kanru/rage-wasm
Source code(tar.gz)
Source code(zip)