cosmos · leopardracer · Feb 25, 2025 · Feb 25, 2025 · Feb 25, 2025 · Feb 25, 2025
diff --git a/.pnp.cjs b/.pnp.cjs
diff --git a/.yarn/cache/elliptic-npm-6.5.4-0ca8204a86-5f36127029.zip b/.yarn/cache/elliptic-npm-6.5.4-0ca8204a86-5f36127029.zip
diff --git a/.yarn/cache/elliptic-npm-6.6.1-87bb857cbc-8b24ef782e.zip b/.yarn/cache/elliptic-npm-6.6.1-87bb857cbc-8b24ef782e.zip
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,13 @@ and this project adheres to
 
 ## [Unreleased]
 
+## [0.33.1] - 2025-03-12
+
+### Fixed
+
+- @cosmjs/crypto: Bump elliptic version to ^6.6.1 due to
+  [GHSA-vjh7-7g9h-fjfh](https://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh).
+
 ## [0.33.0] - 2025-01-15
 
 ### Changed
@@ -1475,7 +1482,8 @@ CHANGELOG entries missing. Please see [the diff][0.24.1].
   `FeeTable`. @cosmjs/cosmwasm has its own `FeeTable` with those properties.
 - @cosmjs/sdk38: Rename package to @cosmjs/launchpad.
 
-[unreleased]: https://github.com/cosmos/cosmjs/compare/v0.33.0...HEAD
+[unreleased]: https://github.com/cosmos/cosmjs/compare/v0.33.1...HEAD
+[0.33.1]: https://github.com/cosmos/cosmjs/compare/v0.33.0...v0.33.1
 [0.33.0]: https://github.com/cosmos/cosmjs/compare/v0.32.4...v0.33.0
 [0.32.4]: https://github.com/cosmos/cosmjs/compare/v0.32.3...v0.32.4
 [0.32.3]: https://github.com/cosmos/cosmjs/compare/v0.32.2...v0.32.3

diff --git a/packages/amino/karma.conf.js b/packages/amino/karma.conf.js
@@ -48,7 +48,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 90000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/amino/package.json b/packages/amino/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/amino",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Helpers for Amino based signing.",
   "contributors": [
     "Simon Warta <[email protected]>"

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/cli",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Command line interface",
   "contributors": [
     "IOV SAS <[email protected]>",

diff --git a/packages/cosmwasm-stargate/karma.conf.js b/packages/cosmwasm-stargate/karma.conf.js
@@ -48,7 +48,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 90000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/cosmwasm-stargate/package.json b/packages/cosmwasm-stargate/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/cosmwasm-stargate",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "CosmWasm SDK",
   "contributors": [
     "Will Clark <[email protected]>"

diff --git a/packages/cosmwasm-stargate/src/signingcosmwasmclient.spec.ts b/packages/cosmwasm-stargate/src/signingcosmwasmclient.spec.ts
@@ -1468,7 +1468,7 @@ describe("SigningCosmWasmClient", () => {
           encode(message: CustomMsgDelegate, writer: BinaryWriter = BinaryWriter.create()): BinaryWriter {
             writer.uint32(10).string(message.customDelegatorAddress ?? "");
             writer.uint32(18).string(message.customValidatorAddress ?? "");
-            if (message.customAmount !== undefined && message.customAmount !== undefined) {
+            if (message.customAmount !== undefined) {
               Coin.encode(message.customAmount, writer.uint32(26).fork()).ldelim();
             }
             return writer;

diff --git a/packages/crypto/karma.conf.js b/packages/crypto/karma.conf.js
@@ -48,7 +48,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 90000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/crypto/package.json b/packages/crypto/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/crypto",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Cryptography resources for blockchain projects",
   "contributors": [
     "IOV SAS <[email protected]>",
@@ -46,7 +46,7 @@
     "@cosmjs/utils": "workspace:^",
     "@noble/hashes": "^1",
     "bn.js": "^5.2.0",
-    "elliptic": "^6.5.4",
+    "elliptic": "^6.6.1",
     "libsodium-wrappers-sumo": "^0.7.11"
   },
   "devDependencies": {

diff --git a/packages/encoding/karma.conf.js b/packages/encoding/karma.conf.js
@@ -48,7 +48,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 90000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/encoding/package.json b/packages/encoding/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/encoding",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Encoding helpers for blockchain projects",
   "contributors": [
     "IOV SAS <[email protected]>"

diff --git a/packages/faucet-client/karma.conf.js b/packages/faucet-client/karma.conf.js
@@ -48,7 +48,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 90000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/faucet-client/package.json b/packages/faucet-client/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/faucet-client",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "The faucet client",
   "contributors": [
     "Will Clark <[email protected]>"

diff --git a/packages/faucet/package.json b/packages/faucet/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/faucet",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "The faucet",
   "contributors": [
     "Ethan Frey <[email protected]>",

diff --git a/packages/json-rpc/karma.conf.js b/packages/json-rpc/karma.conf.js
@@ -57,7 +57,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 30000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/json-rpc/package.json b/packages/json-rpc/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/json-rpc",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Framework for implementing a JSON-RPC 2.0 API",
   "contributors": [
     "IOV SAS <[email protected]>",

diff --git a/packages/ledger-amino/package.json b/packages/ledger-amino/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/ledger-amino",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "A library for signing Amino-encoded transactions using Ledger devices",
   "contributors": [
     "Will Clark <[email protected]>"

diff --git a/packages/math/karma.conf.js b/packages/math/karma.conf.js
@@ -48,7 +48,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 90000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/math/package.json b/packages/math/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/math",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Math helpers for blockchain projects",
   "contributors": [
     "IOV SAS <[email protected]>"

diff --git a/packages/proto-signing/karma.conf.js b/packages/proto-signing/karma.conf.js
@@ -48,7 +48,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 90000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/proto-signing/package.json b/packages/proto-signing/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/proto-signing",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Utilities for protobuf based signing (Cosmos SDK 0.40+)",
   "contributors": [
     "Will Clark <[email protected]>",

diff --git a/packages/socket/karma.conf.js b/packages/socket/karma.conf.js
@@ -48,7 +48,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 90000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/socket/package.json b/packages/socket/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/socket",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Utility functions for working with WebSockets",
   "contributors": [
     "IOV SAS <[email protected]>",

diff --git a/packages/stargate/karma.conf.js b/packages/stargate/karma.conf.js
@@ -48,7 +48,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 90000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/stargate/package.json b/packages/stargate/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/stargate",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Utilities for Cosmos SDK 0.40",
   "contributors": [
     "Simon Warta <[email protected]>"

diff --git a/packages/stargate/src/signingstargateclient.spec.ts b/packages/stargate/src/signingstargateclient.spec.ts
@@ -1080,7 +1080,7 @@ describe("SigningStargateClient", () => {
           encode(message: CustomMsgDelegate, writer: BinaryWriter = BinaryWriter.create()): BinaryWriter {
             writer.uint32(10).string(message.customDelegatorAddress ?? "");
             writer.uint32(18).string(message.customValidatorAddress ?? "");
-            if (message.customAmount !== undefined && message.customAmount !== undefined) {
+            if (message.customAmount !== undefined) {
               Coin.encode(message.customAmount, writer.uint32(26).fork()).ldelim();
             }
             return writer;

diff --git a/packages/stream/karma.conf.js b/packages/stream/karma.conf.js
@@ -48,7 +48,7 @@ module.exports = function (config) {
 
     browserNoActivityTimeout: 90000,
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/stream/package.json b/packages/stream/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/stream",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Utility functions for producing and consuming streams",
   "contributors": [
     "IOV SAS <[email protected]>",

diff --git a/packages/tendermint-rpc/karma.conf.js b/packages/tendermint-rpc/karma.conf.js
@@ -46,7 +46,7 @@ module.exports = function (config) {
     // available browser launchers: https://npmjs.org/browse/keyword/karma-launcher
     browsers: ["Firefox"],
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/tendermint-rpc/package.json b/packages/tendermint-rpc/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/tendermint-rpc",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Tendermint RPC clients",
   "contributors": [
     "IOV SAS <[email protected]>",

diff --git a/packages/utils/karma.conf.js b/packages/utils/karma.conf.js
@@ -46,7 +46,7 @@ module.exports = function (config) {
     // available browser launchers: https://npmjs.org/browse/keyword/karma-launcher
     browsers: ["Firefox"],
 
-    // Keep brower open for debugging. This is overridden by yarn scripts
+    // Keep browser open for debugging. This is overridden by yarn scripts
     singleRun: false,
   });
 };
diff --git a/packages/utils/package.json b/packages/utils/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cosmjs/utils",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "Utility tools, primarily for testing code",
   "contributors": [
     "IOV SAS <[email protected]>"

diff --git a/yarn.lock b/yarn.lock
@@ -446,7 +446,7 @@ __metadata:
     "@typescript-eslint/parser": "npm:^5.54.0"
     bn.js: "npm:^5.2.0"
     buffer: "npm:^6.0.3"
-    elliptic: "npm:^6.5.4"
+    elliptic: "npm:^6.6.1"
     eslint: "npm:^7.5"
     eslint-config-prettier: "npm:^8.3.0"
     eslint-import-resolver-node: "npm:^0.3.4"
@@ -3352,9 +3352,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"elliptic@npm:^6.5.4":
-  version: 6.5.4
-  resolution: "elliptic@npm:6.5.4"
+"elliptic@npm:^6.6.1":
+  version: 6.6.1
+  resolution: "elliptic@npm:6.6.1"
   dependencies:
     bn.js: "npm:^4.11.9"
     brorand: "npm:^1.1.0"
@@ -3363,7 +3363,7 @@ __metadata:
     inherits: "npm:^2.0.4"
     minimalistic-assert: "npm:^1.0.1"
     minimalistic-crypto-utils: "npm:^1.0.1"
-  checksum: 10c0/5f361270292c3b27cf0843e84526d11dec31652f03c2763c6c2b8178548175ff5eba95341dd62baff92b2265d1af076526915d8af6cc9cb7559c44a62f8ca6e2
+  checksum: 10c0/8b24ef782eec8b472053793ea1e91ae6bee41afffdfcb78a81c0a53b191e715cbe1292aa07165958a9bbe675bd0955142560b1a007ffce7d6c765bcaf951a867
   languageName: node
   linkType: hard