chore(deps): update eccoxide requirement from >=0.4.3, <0.5 to >=0.4.3, <0.6

[dependabot]

Updates the requirements on eccoxide to permit the latest version.

Changelog

Sourced from eccoxide's changelog.

0.5.0 - 2026-08-18

• BLS12-381: is_in_subgroup on the Point / PointAffine types of g1 and g2 tells the prime-order-r subgroup apart from the curve it sits in, which the curve equation alone does not. Both are the fast endomorphism checks of https://eprint.iacr.org/2021/1130: σ(P) = [-x²]P for G1 (σ being the cube-root-of-unity endomorphism) and ψ(Q) = [x]Q for G2 (ψ being untwist-Frobenius-twist), which cost a couple of multiplications by the 64-bit seed instead of one by r.
• BLS12-381: hashing to the groups, behind the new bls12-381-hash-to-curve feature (on by default): Point::hash_to_curve and Point::encode_to_curve on g1 and g2 implement the four RFC 9380 suites BLS12381G{1,2}_XMD:SHA-256_SSWU_{RO,NU}_, and the hash_to_curve module exposes expand_message_xmd on its own. The RFC's test vectors are checked against, down to the intermediate field elements and pre-cofactor points.
• BLS12-381: clear_cofactor on the Point / PointAffine types of g1 and g2 sends an arbitrary point of the curve (resp. the twist) into the prime-order subgroup, the step hash-to-curve ends with. G1 multiplies by 1 - x, G2 uses the endomorphism chain of https://eprint.iacr.org/2017/419; both are the h_eff of RFC 9380 section 8.8, so neither pays for a multiplication by the cofactor itself (126 and 507 bits).
• BLS12-381: from_compressed / from_uncompressed now reject points outside the prime-order subgroup; from_compressed_oncurve_only / from_uncompressed_oncurve_only keep decoding any point of the curve, for when membership is known or checked elsewhere.
• BLS12-381: the two halves of the pairing are now public API: miller_loop returns a MillerLoopResult (which multiplies) and MillerLoopResult::final_exponentiation completes it.
• BLS12-381: G1 and G2 points serialize to the standard zcash/IETF compressed and uncompressed encodings, through to_compressed / from_compressed / to_uncompressed / from_uncompressed on Point and PointAffine. Encoding is constant time, the identity included. Decoding validates the flag bits, the canonicity of each coordinate and the curve equation;
• Breaking: Fp2::to_bytes and Fp2::from_bytes_unchecked now use the c1 || c0 component order, the imaginary part first, instead of c0 || c1. This is the order the standard BLS12-381 encodings use, so Fp2 bytes are now directly comparable with published constants and test vectors. The change is silent for code that only round-trips through the crate, but bytes persisted by an earlier version decode to the conjugate-swapped element and have to be swapped on read. The BLS12-381 parameters and the G2 comb table were re-encoded accordingly; no other API is affected.
• Fp2 gained from_bytes (the canonicity-checking counterpart of from_bytes_unchecked), plus the from_slice / to_slice pair and the constant-time from_bytes_ct, mirroring what Fp already provides.
• Every fiat field element gained from_bytes_ct, the constant-time counterpart of from_bytes in the type's default byte order, and affine points gained from_coordinate_ct, which checks the curve equation without branching on the coordinates.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)