Bump @metamask/browser-passworder from 4.1.0 to 4.3.0

[dependabot]

Bumps @metamask/browser-passworder from 4.1.0 to 4.3.0.

Release notes

Sourced from @​metamask/browser-passworder's releases.

4.3.0

Added

• Added isVaultUpdated function to verify if a given vault was encrypted with the target encryption parameters. (#53)
• Added optional targetDerivationParams argument to updateVault and updateVaultWithDetail. (#55)
  • This argument allows to specify the desired parameters to use

4.2.0

Added

• Support key derivation options (#49)
  • Added EncryptionKey type to hold a CryptoKey along with its derivation parameters.
  • Added ExportedEncryptionKey type to hold a JsonWebKey along with its derivation parameters.
  • Added Optional keyMetadata property of type KeyDerivationOptions to EncryptionResult.
  • Added Optional opts argument to keyFromPassword to specify algorithm and parameters to be used in the key derivation. Defaults to PBKDF2 with 900.000 iterations.(MetaMask/browser-passworder#49))
  • Added iterations argument to keyFromPassword function.
  • Added optional keyDerivationOptions argument to encrypt and encryptWithDetail to specify algorithm and parameters to be used in the key Defaults to PBKDF2 at 900.000 iterations.
• Added updateVaultWithDetail function to update existing vault and exported key with a safer encryption method if available (#49)
• Added updateVault function to update existing vault string with a safer encryption method if available (#49)

Changed

• Add optional parameters and properties to support custom derivation options (#49)
  • encrypt method accepts both EncryptionKey and CryptoKey types as key argument.
  • encryptWithKey method accepts both EncryptionKey and CryptoKey types as key argument.
  • decrypt method accepts both EncryptionKey and CryptoKey types as key argument.
  • decryptWithKey method accepts both EncryptionKey and CryptoKey types as key argument.
  • importKey method returns a CryptoKey when a JWK string is passed, or an EncryptionKey when an ExportedEncryptionKey string is passed.
  • exportKey method accepts both EncryptionKey and CryptoKey types as key argument, and returns an ExportedEncryptionKey for the former and a JsonWebKey for the latter.
• Pin TypeScript version to ~4.8.4 (#50)

Changelog

Sourced from @​metamask/browser-passworder's changelog.

[4.3.0]

Added

• Added isVaultUpdated function to verify if a given vault was encrypted with the target encryption parameters. (#53)
• Added optional targetDerivationParams argument to updateVault and updateVaultWithDetail. (#55)
  • This argument allows to specify the desired parameters to use

[4.2.0]

Added

• Support key derivation options (#49)
  • Added EncryptionKey type to hold a CryptoKey along with its derivation parameters.
  • Added ExportedEncryptionKey type to hold a JsonWebKey along with its derivation parameters.
  • Added Optional keyMetadata property of type KeyDerivationOptions to EncryptionResult.
  • Added Optional opts argument to keyFromPassword to specify algorithm and parameters to be used in the key derivation. Defaults to PBKDF2 with 900.000 iterations.(MetaMask/browser-passworder#49))
  • Added iterations argument to keyFromPassword function.
  • Added optional keyDerivationOptions argument to encrypt and encryptWithDetail to specify algorithm and parameters to be used in the key Defaults to PBKDF2 at 900.000 iterations.
• Added updateVaultWithDetail function to update existing vault and exported key with a safer encryption method if available (#49)
• Added updateVault function to update existing vault string with a safer encryption method if available (#49)

Changed

• Add optional parameters and properties to support custom derivation options (#49)
  • encrypt method accepts both EncryptionKey and CryptoKey types as key argument.
  • encryptWithKey method accepts both EncryptionKey and CryptoKey types as key argument.
  • decrypt method accepts both EncryptionKey and CryptoKey types as key argument.
  • decryptWithKey method accepts both EncryptionKey and CryptoKey types as key argument.
  • importKey method returns a CryptoKey when a JWK string is passed, or an EncryptionKey when an ExportedEncryptionKey string is passed.
  • exportKey method accepts both EncryptionKey and CryptoKey types as key argument, and returns an ExportedEncryptionKey for the former and a JsonWebKey for the latter.
• Pin TypeScript version to ~4.8.4 (#50)

Commits

• 02e9ca9 4.3.0 (#54)
• 46263f1 feat: allow client to specify target iterations (#55)
• a44c69c feat: expose isVaultUpdated (#53)
• 0e9e493 4.2.0 (#51)
• ea07cd2 Add key derivation options support (#49)
• 41e7561 chore: pin typescript minor version (#50)
• 8a296f2 Update CODEOWNERS (#47)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)