From f5b7c2469974fd790a8f4a6b81efaf4921002f4f Mon Sep 17 00:00:00 2001
From: minibits-cash <mail@minibits.cash>
Date: Fri, 4 Sep 2026 14:56:54 +0200
Subject: [PATCH] Upgrade cashu-ts from 4.7.1 to 4.10.0
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Mechanical dependency bump with no source changes, so that any behavior
change is attributable to the library alone.

The lockfile moves only the cashu-ts entry: @scure/bip32, @scure/base,
@noble/curves and @noble/hashes all stay at 2.2.0. That matters because
patches/@scure+bip32+2.2.0.patch swaps hmac-sha512 for react-native-quick-crypto
on the BIP-32 derivation path, and is pinned to that exact version — a float
to 2.3.x would fail patch-package and silently drop native acceleration from
seed recovery. All 9 patches still apply.

Verified: tsc --noEmit is unchanged against baseline (89 pre-existing errors
before and after, none new, none resolved), 45 jest suites / 618 tests pass,
and the android Metro bundle builds with the 4.10 symbols present.

Not covered here: cashu-ts's internal proof selection default changed to
selectProofsRotating (#818), which only runs inside wallet.send() against a
live mint and so is invisible to the suite. That is the subject of the
follow-up device testing.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 package.json |  2 +-
 yarn.lock    | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/package.json b/package.json
index edc6ff0d..dadb1bdf 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "machine-translate": "npx @inlang/cli machine translate --project minibits.inlang"
   },
   "dependencies": {
-    "@cashu/cashu-ts": "^4.7.1",
+    "@cashu/cashu-ts": "^4.10.0",
     "@fortawesome/fontawesome-svg-core": "^7.1.0",
     "@fortawesome/free-brands-svg-icons": "^7.1.0",
     "@fortawesome/free-regular-svg-icons": "^7.1.0",
diff --git a/yarn.lock b/yarn.lock
index f882d881..1a95be36 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2869,15 +2869,15 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@cashu/cashu-ts@npm:^4.7.1":
-  version: 4.7.1
-  resolution: "@cashu/cashu-ts@npm:4.7.1"
+"@cashu/cashu-ts@npm:^4.10.0":
+  version: 4.10.0
+  resolution: "@cashu/cashu-ts@npm:4.10.0"
   dependencies:
     "@noble/curves": ^2.2.0
     "@noble/hashes": ^2.2.0
     "@scure/base": ^2.2.0
     "@scure/bip32": ^2.2.0
-  checksum: c8dfb7afd37835f0a79e30cc3e4f0fe70cafbd2670aa6674a978749ecec19c0d8e34597959cc05b96b9663f9ca9803bfd78efcc1d295e7b5e0f3a59c75875477
+  checksum: 55994116585f64acf6078e000ca747e5d082d307779165c9a1aece0803a6d2f1d1c3d9c0c5616cb1b3df8ac12ca2175d03c42f59d08ef3df21ab13c79ecc6b79
   languageName: node
   linkType: hard
 
@@ -14823,7 +14823,7 @@ __metadata:
     "@babel/plugin-proposal-export-namespace-from": ^7.18.9
     "@babel/preset-env": ^7.25.3
     "@babel/runtime": ^7.25.0
-    "@cashu/cashu-ts": ^4.7.1
+    "@cashu/cashu-ts": ^4.10.0
     "@expo/fingerprint": ^0.13.4
     "@fortawesome/fontawesome-svg-core": ^7.1.0
     "@fortawesome/free-brands-svg-icons": ^7.1.0