build(deps): bump @cosmjs/stargate from 0.29.5 to 0.36.0

[dependabot]

Bumps @cosmjs/stargate from 0.29.5 to 0.36.0.

Release notes

Sourced from @​cosmjs/stargate's releases.

0.36.0

Encrypted wallet serialization deprecated!

• The use of encrypted wallet storage is deprecated. In particular this means:

  • Secp256k1HdWallet.serialize/.serializeWithEncryptionKey
  • Secp256k1HdWallet.deserialize/.deserializeWithEncryptionKey
  • DirectSecp256k1HdWallet.serialize/.serializeWithEncryptionKey
  • DirectSecp256k1HdWallet.deserialize/.deserializeWithEncryptionKey

  If you are using any of those methods, please comment at cosmos/cosmjs#1796.

  A scream test was established which slows down the key derivation function a lot. This simulates the use of a pure-JS implementation of Argon2 which we will use on one of the next releases. If this causes problems for your app, switch back to ^0.35.0 and comment in the issue.

• Migrate from libsodium to different implementation in order to reduce bundle size and improve compatibility.

  • ed25519 now uses @​noble/curves
  • xchacha20poly1305 now uses @​noble/ciphers
  • Argon2 now uses hash-wasm

0.35.0

Cosmos client

• Add timeout option to CometBFT clients
• Avoid unnecessary status request when connecting a Comet38Client, Tendermint37Client or Tendermint34Client
• Upgrade CosmJS types to Cosmos SDK 0.50
• Kill @​cosmjs/cli to reduce maintenance burden
• Fix block result types in CometBFT clients

Modern JS

• Replace bn.js dependency with native bigints
• Modernize codebase for Node.js 20+
• Migrate away from axios to native fetch, reducing bundle size and external dependencies
• Preparation for better ES6 module support
• Replace the Node.js „crypto“ import with native crypto APIs to reduce problems with other environments
• All JS output is now ES2022

CI / tooling

• Migrate all CI jobs from CircleCI to GitHub Actions
• Migrate lint tooling to latest versions of eslint and typescript-eslint

Huge shout out to @​dynst for an enoumous amount of high quality contributions to the 0.35.0 and 0.34.0 releases!

0.34.0

Significant updates

• Replace elliptic with noble-curves for the secp256k1 implementation
• Add support for CometBFT 1.x

Full Changelog: https://github.com/cosmos/cosmjs/blob/main/CHANGELOG.md#0340---2025-07-11

0.33.1

... (truncated)

Changelog

Sourced from @​cosmjs/stargate's changelog.

[0.36.0] - 2025-08-14

Changed

• Migrate from libsodium to different implementation in order to reduce bundle size and improve compatibility.

  • ed25519 now uses @​noble/curves
  • xchacha20poly1305 now uses @​noble/ciphers
  • Argon2 now uses hash-wasm

  (#1722)

#1722: cosmos/cosmjs#1722

Deprecated

• The use of encrypted wallet storage is deprecated. In particular this means:

  • Secp256k1HdWallet.serialize/.serializeWithEncryptionKey
  • Secp256k1HdWallet.deserialize/.deserializeWithEncryptionKey
  • DirectSecp256k1HdWallet.serialize/.serializeWithEncryptionKey
  • DirectSecp256k1HdWallet.deserialize/.deserializeWithEncryptionKey

  If you are using any of those methods, please comment at cosmos/cosmjs#1796.

  A scream test was established which slows down the key derivation function a lot. This simulates the use of a pure-JS implementation of Argon2 which we will use on one of the next releases. If this causes problems for your app, switch back to ^0.35.0 and comment in the issue.

  (#1797)

#1797: cosmos/cosmjs#1797

[0.35.0] - 2025-08-13

Added

• @​cosmjs/tendermint-rpc: Add timeout option for HTTP requests in HttpClient and HttpBatchClient. (#1660)

#1660: cosmos/cosmjs#1660

Changed

• all: Drop support for Node.js < 20.
• all: All JS output is now es2022.
• all: Upgrade cosmjs-types to ^0.10.1 (Cosmos SDK 0.50 series)

... (truncated)

Commits

• 46336b8 Set version 0.36.0
• 7195de5 Merge pull request #1798 from cosmos/finish-up-0.36
• 61139cc Add CHANGELOG
• 7325e10 Use sleep for scream test
• 39e712a Merge pull request #1722 from dynst/desalinate
• 6bc8077 Merge pull request #1797 from dynst/desalinate-deprecate
• a0e779d amino, proto-signing: add explicit scream test to KDF code
• 7b65103 migrate to argon2id from hash-wasm
• 072243d increase timeout in jasmine unit test for wallet deserialize/decryption
• 9b37759 proto-signing: mark encryption functions as @deprecated
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: T:dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.