Merge pull request #2198 from CosmWasm/mergify/bp/release/1.5/pr-2014

Fix pubkey recovery to work with high/low s for k256 ^0.13.2 (backport #2014)
CosmWasm · Aug 6, 2024 · 8395b7c · 8395b7c
2 parents 5a4bc0e + 7b43413
commit 8395b7c
Show file tree

Hide file tree

Showing 15 changed files with 125 additions and 124 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,16 @@ and this project adheres to
 
 ## [Unreleased]
 
+### Changed
+
+- cosmwasm-std: Backport PR that changed the version pinned dependency
+  `k256 = { version = "=0.13.1", features = ["ecdsa"] }` to the open version
+  range ^0.13.3 by avoiding a normalization of the public key in
+  `secp256k1_recover_pubkey`. ([#2014], [#2198])
+
+[#2014]: https://github.com/CosmWasm/cosmwasm/pull/2014
+[#2198]: https://github.com/CosmWasm/cosmwasm/pull/2198
+
 ## [1.5.5] - 2024-05-10
 
 ### Changed

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/contracts/burner/Cargo.lock b/contracts/burner/Cargo.lock
diff --git a/contracts/crypto-verify/Cargo.lock b/contracts/crypto-verify/Cargo.lock
diff --git a/contracts/cyberpunk/Cargo.lock b/contracts/cyberpunk/Cargo.lock
diff --git a/contracts/floaty/Cargo.lock b/contracts/floaty/Cargo.lock
diff --git a/contracts/hackatom/Cargo.lock b/contracts/hackatom/Cargo.lock