[dependabot]

Bumps github.com/consensys/gnark-crypto from 0.21.0 to 0.22.0.

Release notes

Sourced from github.com/consensys/gnark-crypto's releases.

v0.22.0

⚠️ Breaking changes

• BLS12-381/Jubjub: twisted-Edwards generator corrected (#821) — regenerate points, keys, and signatures derived from the previous generator.
• BLS12-381/Bandersnatch EdDSA now runs on Bandersnatch instead of Jubjub (#882) — regenerate keys and signatures.
• MamaBear Poseidon2 parameters corrected to R_F = 8, R_P = 32 for 128-bit security (#900) — digests are incompatible with the inherited schedule.
• Go 1.26.8 is now required (go.mod), CI runs Go 1.26.x.

🔒 Security

• ecdsa: reject identity and small-subgroup public keys in SetBytes (#889)
• kzg: restore Vk.G1 from the generator in MpcSetup.ReadFrom — a deserialized setup previously carried Vk.G1 = ∞, letting arbitrary nonzero opening proofs verify (#891)
• vortex: reject malformed opening proofs that could make a false evaluation claim verify (KoalaBear #896; MamaBear in this PR)
• shplonk, fflonk: validate proof shape in BatchVerify to prevent panics (#892)
• fft: validate domain cardinality in ReadFrom to prevent panic/OOM (#893)
• field vectors: bound the vector length read by AsyncReadFrom (#878)

✨ New

• MamaBear field (49-bit, p = 2⁴⁹ − 2³⁴ + 1): base field with AVX-512 IFMA kernels (R = 2⁵² Montgomery), degree-3 extension (~147-bit security), FFT (max NTT size 2³⁴), Poseidon2, SIS, IOP, and the experimental Vortex commitment scheme (#887)
• kzg: Committer interface + OpenWithCommitter / BatchOpenSinglePointWithCommitter for externally accelerated quotient commitments (e.g. WebGPU/wasm MSM) (#879)

⚡ Faster

• MamaBear IFMA vector kernels: mul 22.5×, scalarMul 22.7×, innerProduct 16.5×, sum 15.5× vs pure-Go at 2¹⁴ elements (still 5–9× at 2²⁴); E3 mul −12.5%, square −15.4%, lazy-reduction paths, Poseidon2 −7% (#887)

New Contributors

• @​rdubois-crypto made their first contribution in Consensys-Incorporated/gnark-crypto#882
• @​tzh476 made their first contribution in Consensys-Incorporated/gnark-crypto#878
• @​Lepsina made their first contribution in Consensys-Incorporated/gnark-crypto#897
• @​sug0 made their first contribution in Consensys-Incorporated/gnark-crypto#821

Full Changelog: Consensys-Incorporated/gnark-crypto@v0.21.0...v0.22.0

Changelog

Sourced from github.com/consensys/gnark-crypto's changelog.

[v0.22.0] - 2026-10-02

Breaking

• BLS12-381/Jubjub: correct the twisted-Edwards generator; regenerate keys and signatures derived from the previous generator (#821)
• BLS12-381/Bandersnatch EdDSA now uses Bandersnatch rather than Jubjub; regenerate keys and signatures (#882)
• MamaBear Poseidon2 uses its derived R_F = 8, R_P = 32 round schedule; existing MamaBear Poseidon2 outputs are incompatible (#900)

Security

• ecdsa: reject identity and small-subgroup public keys during key deserialization (#889)
• kzg MPC setup: restore the omitted verifying-key G1 generator when reading a setup, preserving opening-proof binding (#891)
• Vortex: reject malformed opening proofs that could make an invalid evaluation claim verify (KoalaBear #896; MamaBear)
• shplonk and fflonk: reject malformed proof shapes rather than panicking in BatchVerify (#892)
• fft: reject invalid serialized domain cardinalities before panic or excessive allocation (#893)
• field vectors: reject lengths exceeding a knowable remaining input before allocating (#878)

Feat

• add the 49-bit MamaBear field, degree-3 extensions, FFT, Poseidon2, SIS, IOP, and experimental Vortex commitment scheme with AVX-512 IFMA acceleration (#887)
• kzg: add the Committer interface plus OpenWithCommitter and BatchOpenSinglePointWithCommitter for externally accelerated quotient commitments (#879)

Perf

• MamaBear AVX-512 IFMA vector arithmetic and FFT acceleration; optimized E3 arithmetic and Poseidon2 (#887)

Fix

• reject uncompressed all-zero point encodings whose infinity bit is clear (#897)
• correct MamaBear Poseidon2 parameters for 128-bit security (#900)

Build

• require Go 1.26.8 and update CI to Go 1.26.x
• deps: update direct and tool dependencies

Commits

• 550a513 v0.22.0 (#903)
• 7289540 fix: set correct Jubjub curve generator (#821)
• 4c054e7 fix(mamabear): derive the Poseidon2 round numbers for this field (#900)
• 4ac788c fix: reject malformed Vortex opening proofs (#896)
• 6c95d03 Feat: Add MamaBear field support (#887)
• c28a216 fix(shplonk,fflonk): validate proof shape in BatchVerify to prevent panics (#...
• 5e563f6 fix(fft): validate domain cardinality in ReadFrom to prevent panic/OOM (#893)
• e0ccf84 fix: uncompressed infininty handling bug in SetBytes (#897)
• fffb110 fix(kzg): restore Vk.G1 from generator in MpcSetup.ReadFrom (#891)
• 11e7d5f fix(ecdsa): reject identity and small-subgroup public keys in SetBytes (#889)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.89%. Comparing base (765b182) to head (e6792f2).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4219      +/-   ##
==========================================
+ Coverage   80.85%   80.89%   +0.03%     
==========================================
  Files         512      512              
  Lines       39124    39124              
==========================================
+ Hits        31634    31648      +14     
+ Misses       7481     7467      -14     
  Partials        9        9              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.