[Snyk] Security upgrade openpgp from 2.6.2 to 4.10.11

[lololosys]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	501/1000 Why? Recently disclosed, Has a fix available, CVSS 4.3	Improper Verification of Cryptographic Signature SNYK-JS-OPENPGP-5871276	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: openpgp

The new version differs by 250 commits.

• d8a1e25 Release new version
• 8aa633c Reject cleartext messages with extraneous data preceeding hash header
• 1f237e6 Release new version
• 38ec531 Fix ElGamal param range and PKCS1 decoding (#1169)
• d5373ef Update tweetnacl-js
• 21f4ba4 Release new version
• a4b56c9 WKD: Fix "TypeError: fetch is not a function" in Node.js environment (#1181)
• 08fc7b3 Fix and test dummy key conversion (#1172)
• 929b016 Fix documentation of the HKP keyId option (#1151)
• aa89893 Release new version
• 2eab8a1 Add config option to allow insecure decryption with RSA signing keys (#1148)
• cc1bdcb Allow decryption with revoked keys (#1135)
• 2e26509 Add test case for unknown binary notations (#1140)
• 0712e8a Support non-human-readable notation values (#983)
• 25bf080 Add SecretKey.prototype.makeDummy (#1131)
• e29de76 Use correct algorithm in ECC validation tests
• 34b0928 Release new version
• 14f244a Fix decryption tests
• de360e2 Handle CORS errors during WKD lookup (#1125)
• 8783caa Fix key validation tests
• 5801169 Refactor WKD lookup code (#1123)
• 20c468c Release new version
• 3218f7b Don't zero-copy transfer buffers from the worker by default
• 1c41c72 Release new version

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.