fix(deps): update dependency tweetnacl to v1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
tweetnacl (source)	^0.13.1 -> ^1.0.3

---

Release Notes

dchest/tweetnacl-js (tweetnacl)

v1.0.3

Compare Source

IMPORTANT BUG FIX. Due to a bug in calculating carry in
modulo reduction that used bit operations on integers larger than
32 bits, nacl.sign or nacl.sign.detached could have created
incorrect signatures.

This only affects signing, not verification.

Thanks to @​valerini on GitHub for finding and reporting the bug.

v1.0.2

Compare Source

Exported more internal undocumented functions for
third-party projects that rely on low-level interface,
(something users of TweetNaCl shouldn't care about).

v1.0.1

Compare Source

Updated documentation and typings.

v1.0.0

Compare Source

No code changes from v1.0.0-rc.1.

v0.14.5

Compare Source

• Fixed incomplete return types in TypeScript typings.
• Replaced COPYING.txt with LICENSE file, which now has public domain dedication
  text from The Unlicense. License fields in package.json and bower.json have
  been set to "Unlicense". The project was and will be in the public domain --
  this change just makes it easier for automated tools to know about this fact by
  using the widely recognized and SPDX-compatible template for public domain
  dedication.

v0.14.4

Compare Source

• Added TypeScript type definitions (contributed by @​AndSDev).
• Improved benchmarking code.

v0.14.3

Compare Source

Fixed a bug in the fast version of Poly1305 and brought it back.

Thanks to @​floodyberry for promptly responding and fixing the original C code:

"The issue was not properly detecting if st->h was >= 2^130 - 5, coupled with
[testing mistake] not catching the failure. The chance of the bug affecting
anything in the real world is essentially zero luckily, but it's good to have
it fixed."

https://github.com/floodyberry/poly1305-donna/issues/2#issuecomment-202698577

v0.14.2

Compare Source

Switched Poly1305 fast version back to original (slow) version due to a bug.

v0.14.1

Compare Source

No code changes, just tweaked packaging and added COPYING.txt.

v0.14.0

Compare Source

• Breaking change! All functions from nacl.util have been removed. These
  functions are no longer available:

  nacl.util.decodeUTF8
  nacl.util.encodeUTF8
  nacl.util.decodeBase64
  nacl.util.encodeBase64
  

  If want to continue using them, you can include
  https://github.com/dchest/tweetnacl-util-js package:

  <script src="nacl.min.js"></script>
  <script src="nacl-util.min.js"></script>
  

  or

  var nacl = require('tweetnacl');
  nacl.util = require('tweetnacl-util');
  

  However it is recommended to use better packages that have wider
  compatibility and better performance. Functions from nacl.util were never
  intended to be robust solution for string conversion and were included for
  convenience: cryptography library is not the right place for them.

  Currently calling these functions will throw error pointing to
  tweetnacl-util-js (in the next version this error message will be removed).

• Improved detection of available random number generators, making it possible
  to use nacl.randomBytes and related functions in Web Workers without
  changes.

• Changes to testing (see README).

v0.13.3

Compare Source

No code changes.

• Reverted license field in package.json to "Public domain".

• Fixed typo in README.

v0.13.2

Compare Source

• Fixed undefined variable bug in fast version of Poly1305. No worries, this
  bug was never triggered.

• Specified CC0 public domain dedication.

• Updated development dependencies.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.