Skip to content

Bump bn.js - #5008

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-72602e2dc6
Open

Bump bn.js#5008
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-72602e2dc6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps and bn.js. These dependencies needed to be updated together.
Updates bn.js from 5.2.1 to 5.2.5

Changelog

Sourced from bn.js's changelog.

5.2.5 / 2026-07-09

  • fix: correct divRound rounding for negative operands (#320)
  • fix: normalize sign when imuln multiplies by zero (#321)

5.2.4 / 2026-06-26

  • fix: clear surplus words in inotn so notn(width) stays below 2 ** width (#319)

5.2.3 / 2026-02-19

  • fix: imaskn state (#317)

5.2.2 / 2025-04-25

  • fix: imuln/muln with zero (#313)
Commits

Updates bn.js from 4.12.0 to 4.12.5

Changelog

Sourced from bn.js's changelog.

5.2.5 / 2026-07-09

  • fix: correct divRound rounding for negative operands (#320)
  • fix: normalize sign when imuln multiplies by zero (#321)

5.2.4 / 2026-06-26

  • fix: clear surplus words in inotn so notn(width) stays below 2 ** width (#319)

5.2.3 / 2026-02-19

  • fix: imaskn state (#317)

5.2.2 / 2025-04-25

  • fix: imuln/muln with zero (#313)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps  and [bn.js](https://github.com/indutny/bn.js). These dependencies needed to be updated together.

Updates `bn.js` from 5.2.1 to 5.2.5
- [Release notes](https://github.com/indutny/bn.js/releases)
- [Changelog](https://github.com/indutny/bn.js/blob/master/CHANGELOG.md)
- [Commits](indutny/bn.js@v5.2.1...v5.2.5)

Updates `bn.js` from 4.12.0 to 4.12.5
- [Release notes](https://github.com/indutny/bn.js/releases)
- [Changelog](https://github.com/indutny/bn.js/blob/master/CHANGELOG.md)
- [Commits](indutny/bn.js@v5.2.1...v5.2.5)

---
updated-dependencies:
- dependency-name: bn.js
  dependency-version: 5.2.5
  dependency-type: indirect
- dependency-name: bn.js
  dependency-version: 4.12.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

@codacy-production codacy-production Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

The pull request is currently in an incomplete state as the diff contains no file modifications, meaning the intended dependency updates have not been implemented. Furthermore, the specific bug fixes associated with this update are not verified by any new test cases. The PR description is also malformed and requires correction before this can be considered for merging.

About this PR

  • The PR contains no file changes. The dependency updates have not been applied to package.json or the lockfiles in the current commit.
  • The PR description is malformed and contains incomplete sentences, suggesting a failure in automated generation or missing manual input.

Test suggestions

  • Verify divRound correctly handles rounding for negative operands.
  • Verify imuln and muln correctly normalize the sign when multiplying by zero.
  • Verify inotn correctly masks surplus words to maintain the specified width.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify `divRound` correctly handles rounding for negative operands.
2. Verify `imuln` and `muln` correctly normalize the sign when multiplying by zero.
3. Verify `inotn` correctly masks surplus words to maintain the specified width.

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants