Skip to content

Update module github.com/bytemare/ecc to v0.10.0#60

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-bytemare-ecc-0.x
Open

Update module github.com/bytemare/ecc to v0.10.0#60
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-bytemare-ecc-0.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 6, 2026

This PR contains the following updates:

Package Change Age Confidence
github.com/bytemare/ecc v0.9.0v0.10.0 age confidence

Release Notes

bytemare/ecc (github.com/bytemare/ecc)

v0.10.0

Compare Source

Added
  • Scalar.DecodeWithReduction for reducing oversized scalar inputs modulo the group order during decoding.
  • Stronger validation and release automation, including nightly fuzzing, govulncheck, dependency review, and a reusable release-verification workflow.
Releases
  • Automated releases via GitHub Actions using bytemare/slsa for SLSA Level 3 compliance.
Changed
  • HashToScalar, HashToGroup, and EncodeToGroup now return (*T, error) instead of panicking on empty DST.
  • JSON marshaling for Element and Scalar now encodes {"group": ..., "data": ...} instead of a bare hex string to prevent cross-group confusion.
  • Error types refactored: added ErrDecodeElement, ErrDecodeScalar, ErrZeroLengthDST; replaced ErrCastScalar/ErrCastElement with unified ErrWrongGroup.
Fixed
  • Ristretto255 adapter updated to use upstream's new SetCanonicalBytes and SetUniformBytes APIs.
  • Edwards25519 hash-to-scalar now uses SetUniformBytes directly, avoiding big.Int intermediates.
Security
  • Updated crypto backends and supporting dependencies
  • Minimum Go version bumped to 1.26.
Documentation
  • Consolidated architecture and coding practices into docs/architecture_and_guidelines.md.
  • Merged security design and threat model into docs/secure_design.md.
  • Added releasing and roadmap documents, refreshed the README, and added CITATION.cff.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from bytemare as a code owner May 6, 2026 13:43
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label May 6, 2026
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented May 12, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.2 -> 1.26
filippo.io/edwards25519 v1.1.0 -> v1.2.0
filippo.io/nistec v0.0.3 -> v0.0.4
github.com/bytemare/hash v0.5.2 -> v0.6.3
github.com/bytemare/secp256k1 v0.3.0 -> v0.5.0
github.com/gtank/ristretto255 v0.1.2 -> v0.2.0
golang.org/x/crypto v0.38.0 -> v0.50.0
golang.org/x/sys v0.33.0 -> v0.43.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants