@mikrojs/firmware 0.7.0 → 0.8.0-pr-115.g87a99f9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@mikrojs/firmware",
3
- "version": "0.7.0",
3
+ "version": "0.8.0-pr-115.g87a99f9",
4
4
  "description": "Mikro.js ESP32 firmware: ESP-IDF component, build tools, and project template",
5
5
  "keywords": [
6
6
  "esp-idf",
@@ -51,8 +51,8 @@
51
51
  },
52
52
  "dependencies": {
53
53
  "esbuild": "^0.28.0",
54
- "@mikrojs/native": "0.7.0",
55
- "@mikrojs/quickjs": "0.7.0"
54
+ "@mikrojs/native": "0.8.0-pr-115.g87a99f9",
55
+ "@mikrojs/quickjs": "0.8.0-pr-115.g87a99f9"
56
56
  },
57
57
  "engines": {
58
58
  "node": ">=24.0.0"
Binary file
Binary file
Binary file
Binary file
Binary file
@@ -106,8 +106,10 @@ CONFIG_HAL_DEFAULT_ASSERTION_LEVEL=0
106
106
  # native module won't even compile. Cost is roughly 5–10 KB flash.
107
107
  CONFIG_LWIP_IPV6=y
108
108
 
109
- # --- MbedTLS: TLS 1.2 + 1.3, AES-GCM/CCM, ECDHE ---
110
- CONFIG_MBEDTLS_SSL_PROTO_TLS1_3=y
109
+ # --- MbedTLS: TLS 1.2 only, AES-GCM/CCM, ECDHE ---
110
+ # 1.3's handshake working state plus its Kconfig-forced
111
+ # KEEP_PEER_CERTIFICATE add several KB of peak heap per connection, so disable for now
112
+ CONFIG_MBEDTLS_SSL_PROTO_TLS1_3=n
111
113
  # Disable unused features
112
114
  CONFIG_MBEDTLS_SSL_RENEGOTIATION=n
113
115
  CONFIG_MBEDTLS_SSL_ALPN=y
@@ -120,6 +122,14 @@ CONFIG_MBEDTLS_X509_CSR_PARSE_C=n
120
122
  CONFIG_MBEDTLS_ERROR_STRINGS=n
121
123
  CONFIG_MBEDTLS_FS_IO=n
122
124
 
125
+ # Allocate TLS record buffers on demand (vs. a fixed 16 KB IN +
126
+ # 4 KB OUT block alive per connection). Incompatible with DTLS.
127
+ CONFIG_MBEDTLS_DYNAMIC_BUFFER=y
128
+
129
+ # Drop the peer cert chain after handshake validates it (~4 KB per
130
+ # connection). Note: TLS 1.3 force-selects this back on via Kconfig.
131
+ CONFIG_MBEDTLS_SSL_KEEP_PEER_CERTIFICATE=n
132
+
123
133
  # Disable rarely used ECC curves (keep P-256, P-384, Curve25519)
124
134
  # Note: secp192r1, secp224r1, secp192k1, secp224k1 removed in MbedTLS 4.x
125
135
  CONFIG_MBEDTLS_ECP_DP_SECP521R1_ENABLED=n