chore: update dependencies (#131)

Currently dependencies are out of date which cause security problems.
Since this snap is also used with gator snap the security problems get
propagated through the dependency tree.

This PR updates all the dependency to the latest version (except eslint
and zod dependencies) and fixates versions in `package.json`.

Eslint dependencies should be addressed in a separate PR since they
result in changes in the whole code base - style wise.

Author: MoMannn

constraints.pro

@@ -91,7 +91,7 @@ gen_enforced_dependency(WorkspaceCwd, DependencyIdent, null, DependencyType) :-
   DependencyType == 'devDependencies'.
 
 % The package must specify the expected node version constraint.
-gen_enforced_field(WorkspaceCwd, 'engines.node', '^18.18 || >=20').
+gen_enforced_field(WorkspaceCwd, 'engines.node', '^20 || >=22').
 
 % The package is public.
 gen_enforced_field(WorkspaceCwd, 'publishConfig.access', 'public').

package.json

@@ -52,47 +52,47 @@
     "tscheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@lavamoat/allow-scripts": "^3.0.4",
-    "@lavamoat/preinstall-always-fail": "^2.0.0",
-    "@metamask/auto-changelog": "^3.4.4",
-    "@metamask/eslint-config": "^12.2.0",
-    "@metamask/eslint-config-jest": "^12.1.0",
-    "@metamask/eslint-config-nodejs": "^12.1.0",
-    "@metamask/eslint-config-typescript": "^12.1.0",
-    "@metamask/rpc-errors": "^6.3.0",
-    "@metamask/snaps-cli": "^6.7.0",
-    "@metamask/snaps-controllers": "^10.0.1",
-    "@metamask/snaps-jest": "^8.13.0",
-    "@metamask/snaps-sdk": "^6.19.0",
-    "@metamask/utils": "^11.2.0",
-    "@noble/ciphers": "^0.5.3",
-    "@noble/curves": "^1.4.2",
-    "@noble/hashes": "^1.4.0",
-    "@types/jest": "^29.5.12",
-    "@types/node": "^20.14.9",
-    "@typescript-eslint/eslint-plugin": "^7.15.0",
-    "@typescript-eslint/parser": "^7.15.0",
-    "depcheck": "^1.4.7",
-    "eslint": "^8.57.0",
-    "eslint-config-prettier": "^9.1.0",
-    "eslint-plugin-import": "^2.29.1",
-    "eslint-plugin-jest": "^27.9.0",
-    "eslint-plugin-jsdoc": "^48.5.0",
-    "eslint-plugin-n": "^16.6.2",
-    "eslint-plugin-prettier": "^5.1.3",
-    "eslint-plugin-promise": "^6.4.0",
-    "jest": "^29.7.0",
-    "prettier": "^3.3.2",
-    "prettier-plugin-packagejson": "^2.5.0",
-    "rimraf": "^5.0.7",
-    "ts-jest": "^29.1.5",
-    "ts-node": "^10.9.2",
-    "typescript": "^5.5.3",
-    "zod": "^3.23.8"
+    "@lavamoat/allow-scripts": "3.3.4",
+    "@lavamoat/preinstall-always-fail": "2.1.1",
+    "@metamask/auto-changelog": "5.0.2",
+    "@metamask/eslint-config": "12.2.0",
+    "@metamask/eslint-config-jest": "12.1.0",
+    "@metamask/eslint-config-nodejs": "12.1.0",
+    "@metamask/eslint-config-typescript": "12.1.0",
+    "@metamask/rpc-errors": "7.0.3",
+    "@metamask/snaps-cli": "8.1.1",
+    "@metamask/snaps-controllers": "14.1.0",
+    "@metamask/snaps-jest": "9.3.0",
+    "@metamask/snaps-sdk": "8.1.0",
+    "@metamask/utils": "11.4.2",
+    "@noble/ciphers": "1.3.0",
+    "@noble/curves": "1.9.2",
+    "@noble/hashes": "1.8.0",
+    "@types/jest": "29.5.14",
+    "@types/node": "24.0.14",
+    "@typescript-eslint/eslint-plugin": "7.18.0",
+    "@typescript-eslint/parser": "7.18.0",
+    "depcheck": "1.4.7",
+    "eslint": "8.57.1",
+    "eslint-config-prettier": "9.1.0",
+    "eslint-plugin-import": "2.32.0",
+    "eslint-plugin-jest": "27.9.0",
+    "eslint-plugin-jsdoc": "48.11.0",
+    "eslint-plugin-n": "16.6.2",
+    "eslint-plugin-prettier": "5.5.1",
+    "eslint-plugin-promise": "6.6.0",
+    "jest": "29.7.0",
+    "prettier": "3.6.2",
+    "prettier-plugin-packagejson": "2.5.18",
+    "rimraf": "6.0.1",
+    "ts-jest": "29.4.0",
+    "ts-node": "10.9.2",
+    "typescript": "5.8.3",
+    "zod": "3.25.76"
   },
   "packageManager": "[email protected]",
   "engines": {
-    "node": "^18.18 || >=20"
+    "node": "^20 || >=22"
   },
   "publishConfig": {
     "access": "public",
@@ -103,7 +103,8 @@
       "@lavamoat/preinstall-always-fail": false,
       "@metamask/snaps-jest>@metamask/snaps-controllers>@metamask/phishing-controller>@metamask/controller-utils>ethereumjs-util>ethereum-cryptography>keccak": false,
       "@metamask/snaps-jest>@metamask/snaps-controllers>@metamask/phishing-controller>@metamask/controller-utils>ethereumjs-util>ethereum-cryptography>secp256k1": false,
-      "ts-node>@swc/core": false
+      "ts-node>@swc/core": false,
+      "jest>@jest/core>jest-resolve>unrs-resolver": false
     }
   }
 }

snap.config.ts

@@ -4,7 +4,6 @@ import type { SnapConfig } from '@metamask/snaps-cli';
 import { resolve } from 'path';
 
 const config: SnapConfig = {
-  bundler: 'webpack',
   input: resolve(__dirname, 'src/index.ts'),
   server: {
     port: 8080,

snap.manifest.json

@@ -7,7 +7,7 @@
     "url": "https://github.com/MetaMask/message-signing-snap.git"
   },
   "source": {
-    "shasum": "HWZ8hcJfaFq0sleE9d/eGuHTQou3kaBneWbSa24ubls=",
+    "shasum": "uxT3GTjwIHdy570UipoaQR/Ids6HT/xYWTYvsw74k4o=",
     "location": {
       "npm": {
         "filePath": "dist/bundle.js",
@@ -31,6 +31,6 @@
       "snaps": true
     }
   },
-  "platformVersion": "6.19.0",
+  "platformVersion": "8.1.0",
   "manifestVersion": "0.1"
 }

src/utils/ERC1024.test.ts

@@ -156,7 +156,7 @@ describe('errors:', () => {
       ciphertext: 'SOLw4OmDAhhQJf20Wk9uQbe60x1XpZIwYeMU',
     };
     expect(() => ERC1024.decrypt(encrypted as any, receiverSecret)).toThrow(
-      'Uint8Array expected of length 24, not of length=9',
+      'Uint8Array expected of length 24, got length=9',
     );
   });
 

src/utils/nacl.ts

@@ -1,6 +1,6 @@
-import { randomBytes } from '@noble/ciphers/crypto';
 import { hsalsa, secretbox } from '@noble/ciphers/salsa';
 import { u32, u8 } from '@noble/ciphers/utils';
+import { randomBytes } from '@noble/ciphers/webcrypto';
 import { x25519 } from '@noble/curves/ed25519';
 
 const PUBLIC_KEY_BYTES = 32;