Skip to content

[Snyk] Upgrade libsodium-wrappers-sumo from 0.7.3 to 0.8.4#2

Open
snyk-io[bot] wants to merge 1 commit into
masterfrom
snyk-upgrade-8286125f05f2a3c3f0794212b5147faf
Open

[Snyk] Upgrade libsodium-wrappers-sumo from 0.7.3 to 0.8.4#2
snyk-io[bot] wants to merge 1 commit into
masterfrom
snyk-upgrade-8286125f05f2a3c3f0794212b5147faf

Conversation

@snyk-io

@snyk-io snyk-io Bot commented Jul 16, 2026

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to upgrade libsodium-wrappers-sumo from 0.7.3 to 0.8.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 17 versions ahead of your current version.

  • The recommended version was released 3 months ago.

Breaking Change Risk

Merge Risk: High

Notice: This assessment is enhanced by AI.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade libsodium-wrappers-sumo from 0.7.3 to 0.8.4.

See this package in yarn:
libsodium-wrappers-sumo

See this project in Snyk:
https://app.snyk.io/org/site-platform/project/1c1dc2a8-873b-418f-b3db-88364f872341?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr
@snyk-io

snyk-io Bot commented Jul 16, 2026

Copy link
Copy Markdown
Author

Merge Risk: High

This upgrade introduces a significant breaking change in how the library is initialized. Code modifications are required to handle the new asynchronous loading mechanism.

Key Breaking Change:

  • Asynchronous Initialization: The library no longer initializes synchronously. It now returns a Promise that resolves once the underlying WebAssembly module is loaded and compiled. Any code that attempts to use the sodium object immediately upon import will fail.

Action Required:

Your application code must be updated to wait for the library to be ready before calling any of its functions. You must use await or a .then() block.

Example Migration:

  • Old code (before 0.8.x):
    const sodium = require('libsodium-wrappers-sumo');
    // sodium is ready to use here

  • New code (0.8.x and later):
    const sodium = require('libsodium-wrappers-sumo');
    (async () => {
    await sodium.ready;
    // sodium can be used here
    })();

This change was made to better support modern environments and the merging of JavaScript and WebAssembly versions.

Source: Package documentation and related project release notes.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

@snyk-io

snyk-io Bot commented Jul 16, 2026

Copy link
Copy Markdown
Author

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants