chore(deps): bump bn.js from 4.12.5 to 5.2.5

[dependabot]

Bumps bn.js from 4.12.5 to 5.2.5.

Release notes

Sourced from bn.js's releases.

v5.2.1

• fix: serious issue in .toString(16) (#295)

v5.2.0

• fix: Buffer not using global in browser (#260)
• fix: LE constructor for HEX (#265)

v5.1.3

• Add support for defined but not implemented Symbol.for (#252)

v5.1.2

• Fix BN v5/v4 interoperability issue (#249)

v5.1.1

• Temporary workaround for BN#_move (#236)
• Add eslintrc instead config in package.json (#237)

v5.1.0

• Benchmark for BigInt (#226)
• Add documentation for max/min (#232)
• Update BN#inspect for Symbols (#225)
• Improve performance of toArrayLike (#222)
• temporary disable jumboMulTo in BN#mulTo (#221)
• optimize toBitArray function (#212)
• fix iaddn sign issue (#216)

v5.0.0

• travis: update node versions (#205)
• Refactor buffer constructor (#200)
• lib: fix for negative numbers: imuln, modrn, idivn (#185)
• bn: fix Red#imod (#178)
• check unexpected high bits for invalid characters (#173)
• document support very large integers (#158)
• only define toBuffer if Buffer is defined (#172)
• lib: better validation of string input (#151)
• tests: reject decimal input in constructor (#91)
• bn: make .strip() an internal method (#105)
• lib: deprecate .modn() introduce .modrn() (#112 #129 #130)
• bn: don't accept invalid characters (#141)
• package: use files insteadof .npmignore (#152)
• bn: improve allocation speed for buffers (#167)
• toJSON to default to interoperable hex (length % 2) (#164)

Changelog

Sourced from bn.js's changelog.

5.2.5 / 2026-07-09

• fix: correct divRound rounding for negative operands (#320)
• fix: normalize sign when imuln multiplies by zero (#321)

5.2.4 / 2026-06-26

• fix: clear surplus words in inotn so notn(width) stays below 2 ** width (#319)

5.2.3 / 2026-02-19

• fix: imaskn state (#317)

5.2.2 / 2025-04-25

• fix: imuln/muln with zero (#313)

5.2.1 / 2022-02-23

• fix: serious issue in .toString(16) (#295)

5.2.0 / 2021-02-23

• fix: Buffer not using global in browser (#260)
• Fix LE constructor for HEX (#265)

5.1.3 / 2020-08-14

• Add support for defined but not implemented Symbol.for (#252)

5.1.2 / 2020-05-20

• Fix BN v5/v4 interoperability issue (#249)

5.1.1 / 2019-12-24

• Temporary workaround for BN#_move (#236)
• Add eslintrc instead config in package.json (#237)

5.1.0 / 2019-12-23

... (truncated)

Commits

• eb2e57c 5.2.5
• 73fb9a4 fix: correct divRound rounding for negative operands (#320)
• dd84df8 fix: normalize sign when imuln multiplies by zero (#321)
• 96f2f81 5.2.4
• dc3429f fix: clear surplus words in inotn so notn(width) stays below 2 ** width (#319)
• ea6c072 5.2.3
• 33df26b fix imaskn state (#317)
• 6db7c38 5.2.2
• c7e1a53 Fix imuln/muln with zero (#313)
• 4cc0bfa docs: mention the max plain JS number argument value (#307)
• Additional commits viewable in compare view

[aharoitx]

bn.js 5 rejects some private keys that bn.js 4 (and elliptic) accepted. The “load_keypair reads keys like elliptic did” test fails with “Invalid character”. BN is also part of the public API (getPrivate returns a BN), so this would be a breaking change for merchants in a minor release. Closing. If we want it, it belongs in the next major version of the SDK.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[aharoitx]

@dependabot ignore this major version

[dependabot]

OK, I won't notify you about version 5.x.x again, unless you re-open this PR.