build(deps-dev): Bump @noble/post-quantum from 0.7.0 to 0.7.1 in /probe

[dependabot]

Bumps @noble/post-quantum from 0.7.0 to 0.7.1.

Release notes

Sourced from @​noble/post-quantum's releases.

0.7.1

• Added @noble/post-quantum/webcrypto.js, an async noble-style wrapper around the experimental built-in WebCrypto implementations of ML-KEM-512, ML-KEM-768, ML-KEM-1024, and ML-KEM-768 + X25519. It supports deterministic raw-seed key generation, public-key derivation, encapsulation, decapsulation, and a memoized isSupported() probe that performs a complete round trip instead of checking method presence alone.
• Snapshot all options to ensure they're not mutated later
• Snapshot msg in falcon*.attached.open()
• Ensure falcon*.attached.open() throws correct error for malformed sig / pubkey
• combineKEMS() and combineSigners() now expect valid byte arrays
• Enforce digest lengths promised by pre-hash XOF OIDs: 32b for SHAKE128, 64b for SHAKE256
• Improve zeroization
• Improve Falcon signing and parsing: imported compact secret keys are rejected when the reconstructed sampler deviation is outside Falcon's proof interval
• Harden WebCrypto input validation
• Upgraded noble dependencies to 2.4.0

Special thanks to Leon Acosta (from QuantaKrypto audits).

Full Changelog: paulmillr/noble-post-quantum@0.7.0...0.7.1

Changelog

Sourced from @​noble/post-quantum's changelog.

0.7.1 (2026-08-27)

• Added @noble/post-quantum/gwebcrypto.js, an async noble-style wrapper around the experimental built-in WebCrypto implementations of ML-KEM-512, ML-KEM-768, ML-KEM-1024, and ML-KEM-768 + X25519. It supports deterministic raw-seed key generation, public-key derivation, encapsulation, decapsulation, and a memoized isSupported() probe that performs a complete round trip instead of checking method presence alone.
• Snapshot all options to ensure they're not mutated later
• Snapshot msg in falcon*.attached.open()
• Ensure falcon*.attached.open() throws correct error for malformed sig / pubkey
• combineKEMS() and combineSigners() now expect valid byte arrays
• Enforce digest lengths promised by pre-hash XOF OIDs: 32b for SHAKE128, 64b for SHAKE256
• Improve zeroization
• Improve Falcon signing and parsing: imported compact secret keys are rejected when the reconstructed sampler deviation is outside Falcon's proof interval
• Harden WebCrypto input validation
• Upgraded noble dependencies to 2.4.0

Special thanks to Leon Acosta (from QuantaKrypto audits).

Commits

• a237360 Release 0.7.1.
• 89ddfa0 Bump all deps
• 20039f7 Add changelog
• 3b5f198 Bump ci workflows
• fbd31fd Rename workflow
• 07a8a15 Add fuzzing
• cf4cc8f Fix tests
• 4553bad webcrypto: validate KEM outputs
• 75626a2 hybrid: harden composition
• 1942fa1 falcon: harden signature handling
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)