From 04b47c5c607fdfd1aaba52046fd020d400254bc4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 7 May 2026 10:03:52 +0000
Subject: [PATCH 1/2] deps: bump multiformats from 13.4.2 to 14.0.0

Bumps [multiformats](https://github.com/multiformats/js-multiformats) from 13.4.2 to 14.0.0.
- [Release notes](https://github.com/multiformats/js-multiformats/releases)
- [Changelog](https://github.com/multiformats/js-multiformats/blob/master/CHANGELOG.md)
- [Commits](https://github.com/multiformats/js-multiformats/compare/v13.4.2...v14.0.0)

---
updated-dependencies:
- dependency-name: multiformats
  dependency-version: 14.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 21 +++++++++++----------
 package.json      |  2 +-
 2 files changed, 12 insertions(+), 11 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 71573a8..19ece27 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "2.2.3",
       "license": "Apache-2.0 OR MIT",
       "dependencies": {
-        "multiformats": "^13.0.0"
+        "multiformats": "^14.0.0"
       },
       "devDependencies": {
         "@ipld/dag-cbor": "^9.0.0",
@@ -1945,9 +1945,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1962,9 +1959,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2874,6 +2868,13 @@
         "npm": ">=7.0.0"
       }
     },
+    "node_modules/@ipld/dag-cbor/node_modules/multiformats": {
+      "version": "13.4.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-13.4.2.tgz",
+      "integrity": "sha512-eh6eHCrRi1+POZ3dA+Dq1C6jhP1GNtr9CRINMb67OKzqW9I5DUuZM/3jLPlzhgpGeiNUlEGEbkCYChXMCc/8DQ==",
+      "dev": true,
+      "license": "Apache-2.0 OR MIT"
+    },
     "node_modules/@isaacs/cliui": {
       "version": "8.0.2",
       "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
@@ -13523,9 +13524,9 @@
       "license": "MIT"
     },
     "node_modules/multiformats": {
-      "version": "13.4.2",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-13.4.2.tgz",
-      "integrity": "sha512-eh6eHCrRi1+POZ3dA+Dq1C6jhP1GNtr9CRINMb67OKzqW9I5DUuZM/3jLPlzhgpGeiNUlEGEbkCYChXMCc/8DQ==",
+      "version": "14.0.0",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
+      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/multimatch": {
diff --git a/package.json b/package.json
index ecb13d5..828ddbc 100644
--- a/package.json
+++ b/package.json
@@ -161,7 +161,7 @@
     "dep-check": "aegir dep-check"
   },
   "dependencies": {
-    "multiformats": "^13.0.0"
+    "multiformats": "^14.0.0"
   },
   "devDependencies": {
     "@ipld/dag-cbor": "^9.0.0",

From f2fa2cf96c07cf26bef445b744d4566cf69e80f9 Mon Sep 17 00:00:00 2001
From: Rod Vagg <rod@vagg.org>
Date: Mon, 11 May 2026 14:14:39 +1000
Subject: [PATCH 2/2] fix: make types work for latest multiformats update

---
 src/index.js         | 2 +-
 src/vendor/murmur.js | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/index.js b/src/index.js
index 6cf1f3d..d04d29b 100644
--- a/src/index.js
+++ b/src/index.js
@@ -3,7 +3,7 @@ import * as mur from './vendor/murmur.js'
 
 /**
  * @param {number} number
- * @returns {Uint8Array}
+ * @returns {Uint8Array<ArrayBuffer>}
  */
 function fromNumberTo32BitBuf (number) {
   const bytes = new Array(4)
diff --git a/src/vendor/murmur.js b/src/vendor/murmur.js
index fed5bf7..181ff89 100644
--- a/src/vendor/murmur.js
+++ b/src/vendor/murmur.js
@@ -184,7 +184,7 @@ function fmix32 (k) {
  *
  * @param {Uint8Array} key - original data
  * @param {number} [seed] - seed value (defaults to 0)
- * @returns {Uint8Array} the hash value as 16 bytes
+ * @returns {Uint8Array<ArrayBuffer>} the hash value as 16 bytes
  */
 export function murmurHash3_x64_128 (key, seed = 0) {
   let h1 = u64(seed, 0)
@@ -291,7 +291,7 @@ export function murmurHash3_x64_128 (key, seed = 0) {
  *
  * @param {Uint8Array} key - original data
  * @param {number} [seed] - seed value (defaults to 0)
- * @returns {Uint8Array} the hash value as 16 bytes
+ * @returns {Uint8Array<ArrayBuffer>} the hash value as 16 bytes
  */
 export function murmurHash3_x86_128 (key, seed = 0) {
   let h1 = seed >>> 0