Skip to content

Conversation

@renovate
Copy link

@renovate renovate bot commented Sep 23, 2025

This PR contains the following updates:

Package Change Age Confidence
pragmarx/google2fa ^8.0^9.0 age confidence

Release Notes

antonioribeiro/google2fa (pragmarx/google2fa)

v9.0.0

Compare Source

⚠️ Breaking Change
Added
  • Increased default secret key length from 16 to 32 characters for enhanced security
  • Cryptographic entropy increased from 80 bits to 160 bits
  • Maintains full compatibility with Google Authenticator and other TOTP apps
Changed
  • generateSecretKey() now generates 32-character secrets by default
  • To maintain previous behavior, use generateSecretKey(16)
  • Updated tests to reflect new default behavior
Security
  • This change significantly improves security against brute force attacks
  • 32-character secrets provide stronger cryptographic protection while maintaining RFC 6238 compliance

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant