Skip to content

chore(deps): bump openpgp from 6.2.2 to 6.3.0#3849

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/develop/openpgp-6.3.0
Open

chore(deps): bump openpgp from 6.2.2 to 6.3.0#3849
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/develop/openpgp-6.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 28, 2026

Bumps openpgp from 6.2.2 to 6.3.0.

Release notes

Sourced from openpgp's releases.

v6.3.0

What's Changed

  • Support Node.js v24 (openpgpjs/openpgpjs#1896)
  • Add config option to limit decompressed message size (openpgpjs/openpgpjs#1933) Since decompression can increase the memory usage non-linearly, add a config.maxDecompressedMessageSize option to limit the decompressed message size. By default it's set to Infinity, i.e. no limit. Set the config option to a number of bytes to limit the size of data that gets decompressed.
  • Switch from seek-bzip to unbzip2-stream (openpgpjs/openpgpjs#1887) To facilitate the above.
  • Use native CompressionStream/DecompressionStream when not streaming (openpgpjs/openpgpjs#1935) For improved compression/decompression performance when not streaming.
  • Use bufferless transforms (openpgpjs/openpgpjs#1893) For lower memory usage, especially when streaming.
  • JSDoc: make sure only user-facing entities are included in the docs, and add TS support (openpgpjs/openpgpjs#1923)
  • Various dependency version bumps
  • Various improvements to CI

Full Changelog: openpgpjs/openpgpjs@v6.2.2...v6.3.0

Commits
  • e1cab74 6.3.0
  • fccbc3e Use native Compression Streams API when not streaming (#1935)
  • a61cf1f Add config option to limit decompressed message size (#1933)
  • 6ab6b9c Tests: use native web streams when TransformStream is available (#1934)
  • 1b2c842 [npm audit fix] bump glob and js-yaml (#1939)
  • 341354f Tests: Stub navigator.hardwareConcurrency in Node v21+
  • db9531d Tests: Bump mocha timeout for browser tests (#1941)
  • d00821b CI: add workflow permissions (#1937)
  • d27ef92 Bump playwright from 1.56.0 to 1.57.0 (#1936)
  • 1af590a Switch from seek-bzip to unbzip2-stream (#1887)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [openpgp](https://github.com/openpgpjs/openpgpjs) from 6.2.2 to 6.3.0.
- [Release notes](https://github.com/openpgpjs/openpgpjs/releases)
- [Commits](openpgpjs/openpgpjs@v6.2.2...v6.3.0)

---
updated-dependencies:
- dependency-name: openpgp
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 28, 2026
@vercel
Copy link
Copy Markdown

vercel bot commented Mar 28, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
human-app Ready Ready Preview, Comment Mar 28, 2026 1:27pm
human-dashboard-frontend Ready Ready Preview, Comment Mar 28, 2026 1:27pm
staking-dashboard Ready Ready Preview, Comment Mar 28, 2026 1:27pm
2 Skipped Deployments
Project Deployment Actions Updated (UTC)
faucet-frontend Ignored Ignored Preview Mar 28, 2026 1:27pm
faucet-server Ignored Ignored Preview Mar 28, 2026 1:27pm

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants