@openzeppelin/compact-contracts 0.3.0-alpha.2 → 0.4.0-alpha.1

package/multisig/presets/ShieldedMultiSigV3.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.0.1-alpha.1 (multisig/presets/ShieldedMultiSigV3.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (multisig/presets/ShieldedMultiSigV3.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @title ShieldedMultiSigV3
@@ -33,47 +33,26 @@ pragma language_version >= 0.23.0;
  * hash prevent signatures for one operation type from being replayed as
  * the other.
  *
- * @notice ECDSA verification is stubbed. Replace `stubVerifySignature` with
- * `ecdsaVerify`, and `persistentHash` with `keccak256`, once the Compact
- * ECDSA and Keccak primitives are available.
+ * @notice Threshold authorization is enforced with secp256k1 ECDSA
+ * (`secp256k1EcdsaVerifyLowS`) over `persistentHash` digests, via
+ * `EcdsaSignerManager`, so a high-s signature is rejected. The approval
+ * vectors are fixed at `Vector<2, ...>`, so this contract is 2-of-3 only.
+ *
+ * TODO: switch every digest to `keccak256` to match the custodian's HSM
+ * signing format (#827).
  */
 
 import CompactStandardLibrary;
 
-import "../Signer"<Bytes<32>> prefix Signer_;
+import "../EcdsaSignerManager" prefix EcdsaSignerManager_;
 import "../../utils/Utils" prefix Utils_;
 // For testing
 export { ZswapCoinPublicKey };
 
-// ─── Types ──────────────────────────────────────────────────────
-
-/**
- * @description Accumulator for fold-based signature verification.
- * Threads the valid count, previous commitment (for duplicate
- * detection), and message hash through each iteration.
- */
-struct VerificationState {
-  validCount: Uint<8>,
-  prevCommitment: Bytes<32>,
-  msgHash: Bytes<32>
-}
-
-/**
- * @description Input to persistentHash for computing signer commitments.
- * Combines the ECDSA public key with an instance-specific salt and
- * domain separator to produce a unique, unlinkable commitment.
- */
-struct SignerCommitmentInput {
-  pk: Bytes<64>,
-  salt: Bytes<32>,
-  domain: Bytes<32>
-}
-
 // ─── State ──────────────────────────────────────────────────────
 
 export ledger _counter: Counter;
 export ledger _coinNonce: Bytes<32>;
-export ledger _instanceSalt: Bytes<32>;
 export sealed ledger _tokenDomain: Bytes<32>;
 
 // ─── Constructor ────────────────────────────────────────────────
@@ -82,9 +61,9 @@ export sealed ledger _tokenDomain: Bytes<32>;
  * @description Deploys the contract with 3 signer commitments and
  * a threshold of 2.
  *
- * Each commitment is computed off-chain as:
- *   `persistentHash(SignerCommitmentInput { pk, instanceSalt, domain })`
- * where domain is `pad(32, "multisig:signer:")`.
+ * Each commitment is `persistentHash(pkX, pkY, instanceSalt,
+ * "multisig:signer:")`. Use the exported `_calculateSignerId` circuit to
+ * derive them consistently with in-circuit verification.
  *
  * `tokenDomain` is used with `kernel.self()` to derive the token color
  * via `tokenType(_tokenDomain, kernel.self())`. Only coins of this color
@@ -109,10 +88,9 @@ constructor(
   tokenDomain: Bytes<32>,
   signerCommitments: Vector<3, Bytes<32>>,
 ) {
-  _instanceSalt = disclose(instanceSalt);
   _coinNonce = disclose(initCoinNonce);
   _tokenDomain = disclose(tokenDomain);
-  Signer_initialize<3>(signerCommitments, 2);
+  EcdsaSignerManager_initialize<3>(instanceSalt, signerCommitments, 2);
 }
 
 // ─── Mint ───────────────────────────────────────────────────────
@@ -136,9 +114,7 @@ constructor(
  * after the counter has been incremented, binding each mint's nonce to a
  * distinct counter value.
  *
- * @notice Replace `persistentHash` with `keccak256` and `stubVerifySignature`
- * with `ecdsaVerify` once the Compact ECDSA and Keccak primitives are
- * available, to match the custodian's HSM signing format.
+ * @circuitInfo k=17, rows=84506
  *
  * Requirements:
  *
@@ -149,14 +125,14 @@ constructor(
  *
  * @param {Uint<64>} amount - The token amount to mint.
  * @param {Either<ZswapCoinPublicKey, ContractAddress>} recipient - The address to receive the minted tokens.
- * @param {Vector<2, Bytes<64>>} pubkeys - ECDSA public keys of approving signers.
- * @param {Vector<2, Bytes<64>>} signatures - ECDSA signatures over the mint hash.
+ * @param {Vector<2, Secp256k1Point>} pubkeys - Public keys of approving signers.
+ * @param {Vector<2, Secp256k1EcdsaSignature>} signatures - ECDSA signatures over the mint hash.
  */
 export circuit mint(
   amount: Uint<64>,
   recipient: Either<ZswapCoinPublicKey, ContractAddress>,
-  pubkeys: Vector<2, Bytes<64>>,
-  signatures: Vector<2, Bytes<64>>
+  pubkeys: Vector<2, Secp256k1Point>,
+  signatures: Vector<2, Secp256k1EcdsaSignature>
 ): [] {
   const opNonce = _counter;
   _counter.increment(1);
@@ -173,16 +149,7 @@ export circuit mint(
     amount as Bytes<32>
   ]);
 
-  const initialState = VerificationState {
-    validCount: 0 as Uint<8>,
-    prevCommitment: pad(32, ""),
-    msgHash: msgHash
-  };
-
-  const finalState = fold(verifySignature, initialState, pubkeys, signatures);
-  // Thresh check not needed as it will always be 2
-  // Leaving it as defense-in-depth
-  Signer_assertThresholdMet(finalState.validCount);
+  EcdsaSignerManager_assertApprovals(msgHash, pubkeys, signatures);
 
   _coinNonce = evolveNonce(_counter, _coinNonce);
   mintShieldedToken(_tokenDomain, disclose(amount), _coinNonce, disclose(canonRecipient));
@@ -211,9 +178,7 @@ export circuit mint(
  * The "multisig:burn:" domain prefix ensures burn signatures cannot be replayed
  * as mint operations for the same parameters.
  *
- * @notice Replace `persistentHash` with `keccak256` and `stubVerifySignature`
- * with `ecdsaVerify` once the Compact ECDSA and Keccak primitives are
- * available, to match the custodian's HSM signing format.
+ * @circuitInfo k=17, rows=92170
  *
  * Requirements:
  *
@@ -226,14 +191,14 @@ export circuit mint(
  *
  * @param {QualifiedShieldedCoinInfo} coin - The coin to burn (from operator's UTXO pool).
  * @param {Uint<64>} amount - The token amount to burn.
- * @param {Vector<2, Bytes<64>>} pubkeys - ECDSA public keys of approving signers.
- * @param {Vector<2, Bytes<64>>} signatures - ECDSA signatures over the burn hash.
+ * @param {Vector<2, Secp256k1Point>} pubkeys - Public keys of approving signers.
+ * @param {Vector<2, Secp256k1EcdsaSignature>} signatures - ECDSA signatures over the burn hash.
  */
 export circuit burn(
   coin: QualifiedShieldedCoinInfo,
   amount: Uint<64>,
-  pubkeys: Vector<2, Bytes<64>>,
-  signatures: Vector<2, Bytes<64>>
+  pubkeys: Vector<2, Secp256k1Point>,
+  signatures: Vector<2, Secp256k1EcdsaSignature>
 ): [] {
   const opNonce = _counter;
   _counter.increment(1);
@@ -245,16 +210,7 @@ export circuit burn(
     amount as Bytes<32>
   ]);
 
-  const initialState = VerificationState {
-    validCount: 0 as Uint<8>,
-    prevCommitment: pad(32, ""),
-    msgHash: msgHash
-  };
-
-  const finalState = fold(verifySignature, initialState, pubkeys, signatures);
-  // Thresh check not needed as it will always be 2
-  // Leaving it as defense-in-depth
-  Signer_assertThresholdMet(finalState.validCount);
+  EcdsaSignerManager_assertApprovals(msgHash, pubkeys, signatures);
 
   assert(coin.color == tokenType(_tokenDomain, kernel.self()), "Multisig: coin not from this contract");
   assert(coin.value >= amount, "Multisig: insufficient coin value");
@@ -262,107 +218,94 @@ export circuit burn(
   sendShielded(disclose(coin), shieldedBurnAddress(), disclose(amount));
 }
 
-// ─── Signature Verification ─────────────────────────────────────
+// ─── Commitments ────────────────────────────────────────────────
 
 /**
- * @description Fold callback. Verifies one signer's approval.
- *
- * Computes the signer's commitment from their public key and the instance
- * salt, checks for duplicates against the previous commitment, verifies
- * registry membership, and validates the ECDSA signature.
+ * @description Computes a signer commitment from a secp256k1 public key,
+ * as `persistentHash(pkX, pkY, salt, "multisig:signer:")`.
  *
- * @notice Circuit signatures are fixed at Vector<2, ...>, so this contract
- * supports only a fixed 2-of-3 configuration. Supporting more signatures
- * (e.g. 3-of-N) requires a separate variant with a larger vector and a
- * different duplicate-detection mechanism (sorted commitments or bitmap).
+ * Pure, so the deployer can derive constructor commitments off-chain.
  *
- * @param {VerificationState} state - Accumulator threaded through fold.
- * @param {Bytes<64>} pubkey - The signer's ECDSA public key.
- * @param {Bytes<64>} signature - The signer's signature over msgHash.
- * @returns {VerificationState} Updated accumulator.
- */
-circuit verifySignature(
-  state: VerificationState,
-  pubkey: Bytes<64>,
-  signature: Bytes<64>
-): VerificationState {
-  const commitment = _calculateSignerId(pubkey, _instanceSalt);
-
-  // Duplicate detection — sufficient for 2 signers only
-  assert(commitment != state.prevCommitment, "Multisig: duplicate signer");
-
-  Signer_assertSigner(commitment);
-
-  // TODO: Replace with ecdsaVerify + keccak256 when primitives are available
-  assert(stubVerifySignature(pubkey, state.msgHash, signature), "Multisig: invalid signature");
-
-  return VerificationState {
-    validCount: state.validCount + 1 as Uint<8>,
-    prevCommitment: commitment,
-    msgHash: state.msgHash
-  };
-}
-
-/**
- * @description Computes a signer commitment from an ECDSA public key.
- *
- * The commitment is persistentHash(pk, salt, domain) where:
- * - pk: the signer's ECDSA public key (64 bytes)
- * - salt: instance-specific random value (prevents cross-contract correlation)
- * - domain: "multisig:signer:" (domain separation)
+ * Requirements:
  *
- * Pure circuit — callable off-chain by the deployer to compute
- * commitments for the constructor.
+ * - `pk` must not be the secp256k1 identity point, which has no coordinates.
  *
- * @param {Bytes<64>} pk - The ECDSA public key.
+ * @param {Secp256k1Point} pk - The secp256k1 public key.
  * @param {Bytes<32>} salt - The instance salt.
  * @returns {Bytes<32>} The signer commitment.
  */
 export pure circuit _calculateSignerId(
-  pk: Bytes<64>,
+  pk: Secp256k1Point,
   salt: Bytes<32>
 ): Bytes<32> {
-  return persistentHash<SignerCommitmentInput>(SignerCommitmentInput {
-    pk: pk,
-    salt: salt,
-    domain: pad(32, "multisig:signer:")
-  });
-}
-
-/**
- * @description Stub for ECDSA signature verification.
- * Always returns true. MUST be replaced before any non-test deployment.
- */
-circuit stubVerifySignature(
-  pubkey: Bytes<64>,
-  msgHash: Bytes<32>,
-  signature: Bytes<64>
-): Boolean {
-  return true;
+  return EcdsaSignerManager_calculateSignerId(pk, salt);
 }
 
 // ─── View ───────────────────────────────────────────────────────
 
+/**
+ * @description Returns the counter the next mint or burn digest will bind to.
+ *
+ * @circuitInfo k=6, rows=34
+ *
+ * @returns {Uint<64>} The current counter.
+ */
 export circuit getNonce(): Uint<64> {
   return _counter;
 }
 
+/**
+ * @description Returns the domain separator this contract's token type derives from.
+ *
+ * @circuitInfo k=6, rows=57
+ *
+ * @returns {Bytes<32>} The token domain.
+ */
 export circuit getTokenDomain(): Bytes<32> {
   return _tokenDomain;
 }
 
+/**
+ * @description Returns this contract's token type.
+ *
+ * @circuitInfo k=13, rows=3836
+ *
+ * @returns {Bytes<32>} The token type.
+ */
 export circuit getTokenType(): Bytes<32> {
   return tokenType(_tokenDomain, kernel.self());
 }
 
+/**
+ * @description Returns the number of registered signers.
+ *
+ * @circuitInfo k=6, rows=34
+ *
+ * @returns {Uint<8>} The signer count.
+ */
 export circuit getSignerCount(): Uint<8> {
-  return Signer_getSignerCount();
+  return EcdsaSignerManager_getSignerCount();
 }
 
+/**
+ * @description Returns the approval threshold.
+ *
+ * @circuitInfo k=6, rows=34
+ *
+ * @returns {Uint<8>} The threshold.
+ */
 export circuit getThreshold(): Uint<8> {
-  return Signer_getThreshold();
+  return EcdsaSignerManager_getThreshold();
 }
 
+/**
+ * @description Returns whether the given commitment is a registered signer.
+ *
+ * @circuitInfo k=8, rows=129
+ *
+ * @param {Bytes<32>} commitment - The signer commitment to check.
+ * @returns {Boolean} True if registered.
+ */
 export circuit isSigner(commitment: Bytes<32>): Boolean {
-  return Signer_isSigner(commitment);
+  return EcdsaSignerManager_isSigner(commitment);
 }

package/multisig/presets/forwarder/ForwarderPrivate.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (multisig/presets/forwarder/ForwarderPrivate.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (multisig/presets/forwarder/ForwarderPrivate.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @title ForwarderPrivate

package/multisig/presets/forwarder/ForwarderShielded.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (multisig/presets/forwarder/ForwarderShielded.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (multisig/presets/forwarder/ForwarderShielded.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @title ForwarderShielded

package/multisig/presets/forwarder/ForwarderUnshielded.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (multisig/presets/forwarder/ForwarderUnshielded.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (multisig/presets/forwarder/ForwarderUnshielded.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @title ForwarderUnshielded

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openzeppelin/compact-contracts",
-  "version": "0.3.0-alpha.2",
+  "version": "0.4.0-alpha.1",
   "description": "OpenZeppelin Compact contract library",
   "keywords": [
     "openzeppelin",
@@ -27,12 +27,12 @@
     "compile": "compact-compiler --exclude '*/archive/*'",
     "compile:access": "compact-compiler --dir access",
     "compile:archive": "compact-compiler --dir archive",
-    "compile:crypto": "compact-compiler --dir crypto",
-    "compile:multisig": "compact-compiler --dir multisig",
+    "compile:crypto": "compact-compiler --dir crypto --feature-zkir-v3",
+    "compile:multisig": "compact-compiler --dir multisig --feature-zkir-v3",
     "compile:security": "compact-compiler --dir security",
     "compile:token": "compact-compiler --dir token",
     "compile:utils": "compact-compiler --dir utils",
-    "compile:integration": "SKIP_ZK=true compact-compiler --src test/integration/_mocks",
+    "compile:integration": "compact-compiler --src test/integration/_mocks",
     "build": "compact-builder --hierarchical --out dist --clean-dist --exclude '*/archive/*' --exclude 'Mock*' --exclude '*.mock.compact' --copy package.json --copy ../README.md && find dist -type d -empty -delete",
     "test": "vitest run --project unit",
     "test:coverage": "vitest run --project unit --coverage",
@@ -46,24 +46,26 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@openzeppelin/compact-cli": "^0.0.2"
+    "@openzeppelin/compact-cli": "^0.0.3"
   },
   "devDependencies": {
-    "@midnight-ntwrk/compact-js": "2.5.1",
-    "@midnight-ntwrk/compact-runtime": "0.16.0",
-    "@midnight-ntwrk/ledger-v8": "8.1.0",
-    "@midnight-ntwrk/midnight-js-contracts": "4.1.1",
-    "@midnight-ntwrk/midnight-js-http-client-proof-provider": "4.1.1",
-    "@midnight-ntwrk/midnight-js-indexer-public-data-provider": "4.1.1",
-    "@midnight-ntwrk/midnight-js-network-id": "4.1.1",
-    "@midnight-ntwrk/midnight-js-node-zk-config-provider": "4.1.1",
-    "@midnight-ntwrk/midnight-js-protocol": "4.1.1",
-    "@midnight-ntwrk/midnight-js-types": "4.1.1",
-    "@midnight-ntwrk/testkit-js": "4.1.1",
-    "@openzeppelin/compact-simulator": "^0.3.1",
-    "@tsconfig/node24": "^24.0.4",
-    "@types/node": "26.1.2",
-    "@vitest/coverage-v8": "^4.1.10",
+    "@midnight-ntwrk/compact-js": "2.5.5-rc.8",
+    "@midnight-ntwrk/compact-runtime": "0.19.0",
+    "@midnight-ntwrk/midnight-js-contracts": "5.0.0-beta.7",
+    "@midnight-ntwrk/midnight-js-http-client-proof-provider": "5.0.0-beta.7",
+    "@midnight-ntwrk/midnight-js-indexer-public-data-provider": "5.0.0-beta.7",
+    "@midnight-ntwrk/midnight-js-network-id": "5.0.0-beta.7",
+    "@midnight-ntwrk/midnight-js-node-zk-config-provider": "5.0.0-beta.7",
+    "@midnight-ntwrk/midnight-js-protocol": "5.0.0-beta.7",
+    "@midnight-ntwrk/midnight-js-types": "5.0.0-beta.7",
+    "@midnight-ntwrk/testkit-js": "5.0.0-beta.7",
+    "@midnightntwrk/ledger-v9": "1.0.0-rc.3",
+    "@midnightntwrk/wallet-sdk-address-format": "4.0.0-beta.2",
+    "@noble/curves": "^2.2.0",
+    "@openzeppelin/compact-simulator": "^0.4.0",
+    "@tsconfig/node24": "^24.0.5",
+    "@types/node": "26.4.0",
+    "@vitest/coverage-v8": "^4.1.11",
     "fast-check": "^4.9.0",
     "ts-node": "^10.9.2",
     "typescript": "^6.0.3",

package/security/Allowlist.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (security/Allowlist.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (security/Allowlist.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module Allowlist

package/security/Blocklist.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (security/Blocklist.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (security/Blocklist.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module Blocklist

package/security/Initializable.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (security/Initializable.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (security/Initializable.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module Initializable

package/security/Pausable.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (security/Pausable.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (security/Pausable.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module Pausable

package/token/ConfidentialFungibleToken.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/ConfidentialFungibleToken.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/ConfidentialFungibleToken.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module ConfidentialFungibleToken
@@ -131,7 +131,7 @@ pragma language_version >= 0.23.0;
  * Midnight runtime enforcing two curve invariants this module does NOT re-check:
  * every JubjubPoint reaching a curve op is cofactor-cleared into the prime-order
  * subgroup (so off-curve, low-order, or mixed-order points make the circuit
- * unsatisfiable), and `ecMul` faults on a scalar >= the subgroup order. These are
+ * unsatisfiable), and a scalar >= the subgroup order is rejected. These are
  * regression-pinned with adversarial inputs in
  * `crypto/test/CurveRuntimeInvariants.test.ts`, which fails loudly if a future
  * runtime stops enforcing them. That is behavioral verification of the shipped
@@ -653,9 +653,9 @@ module ConfidentialFungibleToken {
     const seed = wit_RandomnessSeed();
 
     // Randomness must be a VALID Jubjub scalar. `transientHash`'s raw Field output
-    // can exceed the Jubjub scalar-field order and fault `ecMulGenerator`, so each
-    // scalar is derived via `degradeToTransient(persistentHash(...))`, which
-    // truncates into the scalar field. The per-recipient count, folded into a
+    // can exceed the Jubjub scalar-field order, so each scalar is derived via
+    // `degradeToTransient(persistentHash(...))`, which truncates into the scalar
+    // field. The per-recipient count, folded into a
     // Bytes<32> nonce, keeps each credit's randomness unique even if the seed
     // repeats (essential for the memo OTP). This inlines the tag + expansion into
     // a single hash per scalar. The residual persistentHash cost is poseidon-gated
@@ -669,10 +669,10 @@ module ConfidentialFungibleToken {
     const countHash = persistentHash<Field>(count);
     const rBalance = degradeToTransient(
       persistentHash<Vector<4, Bytes<32>>>([seed, pad(32, "credit_balance"), account, countHash])
-    );
+    ) as JubjubScalar;
     const e = degradeToTransient(
       persistentHash<Vector<4, Bytes<32>>>([seed, pad(32, "credit_memo"), account, countHash])
-    );
+    ) as JubjubScalar;
 
     // Credit lands in the recipient's PENDING pool (not spendable), so incoming
     // value never churns their spendable ciphertext; they sweep it when ready.
@@ -1167,7 +1167,7 @@ module ConfidentialFungibleToken {
           // never decrypted. Use an on-curve identity point (never a `default`,
           // which is off-curve).
           ownerMemo: EcdhMask_Ciphertext {
-            ephemeralPk: ecMulGenerator(0 as Field),
+            ephemeralPk: ecMulGenerator(0 as JubjubScalar),
             ct: 0 as Field
           }
         })

package/token/FungibleToken.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/FungibleToken.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/FungibleToken.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module FungibleToken

package/token/MultiToken.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/MultiToken.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/MultiToken.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module MultiToken

package/token/NativeShieldedToken.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/NativeShieldedToken.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/NativeShieldedToken.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module NativeShieldedToken

package/token/NativeShieldedTokenCore.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/NativeShieldedTokenCore.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/NativeShieldedTokenCore.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module NativeShieldedTokenCore

package/token/NativeShieldedTokenFamily.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/NativeShieldedTokenFamily.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/NativeShieldedTokenFamily.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module NativeShieldedTokenFamily

package/token/NonFungibleToken.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/NonFungibleToken.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/NonFungibleToken.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module NonFungibleToken

package/token/extensions/ConfidentialFungibleTokenPublicSupply.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/extensions/ConfidentialFungibleTokenPublicSupply.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/extensions/ConfidentialFungibleTokenPublicSupply.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module ConfidentialFungibleTokenPublicSupply

package/token/extensions/NativeShieldedTokenDerivedNonce.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/extensions/NativeShieldedTokenDerivedNonce.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/extensions/NativeShieldedTokenDerivedNonce.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module NativeShieldedTokenDerivedNonce

package/token/extensions/NativeShieldedTokenFamilyPublicSupply.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
 // OpenZeppelin Compact Contracts v0.2.0 (token/extensions/NativeShieldedTokenFamilyPublicSupply.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module NativeShieldedTokenFamilyPublicSupply

package/token/extensions/NativeShieldedTokenPublicSupply.compact

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
 // OpenZeppelin Compact Contracts v0.2.0 (token/extensions/NativeShieldedTokenPublicSupply.compact)
 
-pragma language_version >= 0.23.0;
+pragma language_version >= 0.26.0;
 
 /**
  * @module NativeShieldedTokenPublicSupply