diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index fe5864f..4a09a3e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,6 +5,13 @@ updates:
     schedule:
       interval: daily
       time: "03:00"
+    groups:
+      dev-dependencies:
+        dependency-type: "development"
+      minor-changes:
+        update-types:
+          - "minor"
+          - "patch"
     open-pull-requests-limit: 10
     assignees:
       - slowli
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c1085a4..a2682d0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -43,6 +43,8 @@ jobs:
       - build
     if: github.event_name == 'push'
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
 
     steps:
       - uses: actions/checkout@v3
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3dd6370..75e0e9e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,10 @@ The project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html)
 
 ## [Unreleased]
 
+### Internal improvements
+
+- Update demo web page to use newer version of Bootstrap; get rid of jQuery.
+
 ## 0.2.1 - 2022-09-27
 
 ### Fixed
diff --git a/examples/demo.html b/examples/demo.html
index dc85111..4495d41 100644
--- a/examples/demo.html
+++ b/examples/demo.html
@@ -7,7 +7,7 @@
   <meta name="description" content="Demo of bech32-buffer package capabilities">
 
   <title>Bech32 Demo</title>
-  <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-wEmeIV1mKuiNpC+IOBjI7aAzPcEZeedi5yW5f2yOq55WWLwNGmvvx4Um1vskeMj0" crossorigin="anonymous">
+  <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-T3c6CoIi6uLrA9TneNEoa7RxnatzjcDSCmG1MXxSR1GAsXEV/Dwwykc2MPK8M2HN" crossorigin="anonymous">
   <style>
   textarea {
     resize: none;
@@ -113,7 +113,7 @@ <h1>bech32-buffer</h1>
                     <div class="col-12 form-text text-muted small">A short tag describing what a Bech32-encoded string is used for.</div>
                   </div>
                   <div class="mb-3 row">
-                    <label class="col-3 col-form-label">Encoding</label>
+                    <span class="col-3 col-form-label">Encoding</span>
                     <div class="col-9">
                       <div class="btn-group" role="group">
                         <input type="radio" class="btn-check" name="encoding-options" id="encoding-bech32" autocomplete="off">
@@ -126,7 +126,7 @@ <h1>bech32-buffer</h1>
                 </div>
                 <div class="tab-pane active" id="encode-btc" role="tabpanel" aria-labelledby="encode-btc-tab">
                   <div class="mb-3 row">
-                    <label class="col-3 col-form-label">Network</label>
+                    <span class="col-3 col-form-label">Network</span>
                     <div class="col-9">
                       <div class="btn-group" role="group">
                         <input type="radio" class="btn-check" name="btc-network-options" id="btc-mainnet" autocomplete="off" checked>
@@ -151,7 +151,7 @@ <h1>bech32-buffer</h1>
                 <div class="form-text text-muted small">Binary data (in hex) to be encoded into Bech32.</div>
               </div>
 
-              <button type="button" id="encode" class="btn btn-primary" data-container="body" data-toggle="popover" data-placement="bottom" data-content="">Encode</button>
+              <button type="button" id="encode" class="btn btn-primary" data-bs-container="body" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-content="Encode">Encode</button>
               <a id="random" title="Generate random data" class="ms-3" href="#">Random data</a>
             </form>
           </div>
@@ -170,7 +170,7 @@ <h3 class="card-header align-header-height">Bech32</h3>
                 <div class="form-text text-muted small">Encoded Bech32 string.</div>
               </div>
 
-              <button type="button" id="decode" class="btn btn-primary" data-container="body" data-toggle="popover" data-placement="top" data-content="">Decode</button>
+              <button type="button" id="decode" class="btn btn-primary" data-bs-container="body" data-bs-toggle="popover" data-bs-placement="top" data-bs-content="Decode">Decode</button>
             </form>
           </div>
         </div>
@@ -178,7 +178,7 @@ <h3 class="card-header align-header-height">Bech32</h3>
     </div>
 
     <footer class="page-footer small text-muted">
-      <span class="copyright">© 2021 Alex Ostrovski</span>
+      <span class="copyright">© 2023 Alex Ostrovski</span>
       <div class="float-none float-sm-end">
         <a href="https://github.com/slowli/bech32-buffer">GitHub</a>&nbsp;•
         <a href="https://npmjs.com/package/bech32-buffer">Npm</a>&nbsp;•
@@ -187,15 +187,13 @@ <h3 class="card-header align-header-height">Bech32</h3>
     </footer>
   </div>
 
-  <script src="https://code.jquery.com/jquery-3.6.0.slim.min.js" integrity="sha256-u7e5khyithlIdTpu22PHhENmPcRdFiHRjhAuHcs05RI=" crossorigin="anonymous"></script>
-  <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.0.0/dist/js/bootstrap.bundle.min.js" integrity="sha384-p34f1UUtsS3wqzfto5wAAmdvj+osOnFyQFpp4Ua3gs/ZVWx6oOypYoCJhGGScy+8" crossorigin="anonymous"></script>
-
+  <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-C6RzsynM9kWDrMNeT87bh95OGNyZPhcTNXj1NW7RuBCsyN/o0jlpcV8Qyq46cDfL" crossorigin="anonymous"></script>
   <script src="qrcode.min.js"></script>
   <script src="../dist/bech32-buffer.min.js"></script>
 
   <script>
-  /* eslint-env browser, jquery */
-  /* global bech32 */
+  /* eslint-env browser */
+  /* global bech32, bootstrap */
   (function () {
     /**
      * Converts a byte array into a hex string.
@@ -220,52 +218,64 @@ <h3 class="card-header align-header-height">Bech32</h3>
       }
       let buffer = new Uint8Array(str.length / 2);
       for (let i = 0; i < buffer.length; i++) {
-        buffer[i] = parseInt(str.substr(2 * i, 2), 16);
+        buffer[i] = parseInt(str.substring(2 * i, 2 * i + 2), 16);
       }
       return buffer;
     }
 
-    const hrp = $('#hrp');
-    const data = $('#data');
-    const encoded = $('#encoded');
-    const encodeBtn = $('#encode');
-    const decodeBtn = $('#decode');
-    const randomBtn = $('#random');
-    const scriptVersion = $('#script-version');
+    const hrp = document.getElementById('hrp');
+    const data = document.getElementById('data');
+    const encoded = document.getElementById('encoded');
+    const encodeBtn = document.getElementById('encode');
+    const decodeBtn = document.getElementById('decode');
+    const randomBtn = document.getElementById('random');
+    const scriptVersion = document.getElementById('script-version');
 
     const timeouts = {};
 
     function report(type, btn, message) {
-      const id = btn[0].id;
+      const id = btn.id;
       const timeout = timeouts[id];
       if (timeout) clearTimeout(timeout);
 
-      btn.attr('data-bs-content', '<span class="text-' + type + '">' + message + '</span>');
-      btn[0].customPopover.show();
-      timeouts[id] = setTimeout(function() {
-        btn[0].customPopover.hide();
+      const popover = bootstrap.Popover.getInstance(btn);
+      popover.setContent({
+        '.popover-body': '<span class="text-' + type + '">' + message + '</span>'
+      });
+      popover.show();
+      timeouts[id] = setTimeout(() => {
+        popover.hide();
         delete timeouts[id];
       }, 3000);
     }
 
-    encodeBtn.click(function() {
+    document.querySelectorAll('[data-bs-toggle="popover"]').forEach((element) => {
+      new bootstrap.Popover(element, {
+        trigger: 'manual',
+        html: true,
+      });
+    });
+
+    encodeBtn.onclick = () => {
       let enc;
-      const btc = $('#encode-btc').hasClass('active');
+      const btc = document.getElementById('encode-btc').classList.contains('active');
 
       try {
-        const buffer = fromHexString(data.val());
+        const buffer = fromHexString(data.value);
         if (!buffer) throw new TypeError('Invalid hex encoding of data');
 
         if (btc) {
-          const prefix = $('#btc-mainnet').prop('checked') ? 'bc' : 'tb';
-          const version = parseInt(scriptVersion.val());
+          const prefix = document.getElementById('btc-mainnet').checked ? 'bc' : 'tb';
+          const version = parseInt(scriptVersion.value);
           const btcAddress = new bech32.BitcoinAddress(prefix, version, buffer);
           enc = btcAddress.encode();
         } else {
-          const encoding = $('#encoding-bech32').prop('checked') ? 'bech32' : 'bech32m';
-          enc = bech32.encode(hrp.val(), buffer, encoding);
+          const encoding = document.getElementById('encoding-bech32').checked
+            ? 'bech32'
+            : 'bech32m';
+          enc = bech32.encode(hrp.value, buffer, encoding);
         }
-        encoded.val(enc);
+        encoded.value = enc;
       } catch (e) {
         report('danger', encodeBtn, 'Error: ' + e.message);
         return;
@@ -275,32 +285,36 @@ <h3 class="card-header align-header-height">Bech32</h3>
       const qr = qrcode(0, 'M');
       qr.addData(enc.toUpperCase(), 'Alphanumeric');
       qr.make();
-      $('#qrcode').html(qr.createSvgTag(4, 0));
-    });
+      document.getElementById('qrcode').innerHTML = qr.createSvgTag(4, 0);
+    };
 
-    decodeBtn.click(function() {
+    decodeBtn.onclick = () => {
       let dec;
-      const btc = $('#encode-btc').hasClass('active');
+      const btc = document.getElementById('encode-btc').classList.contains('active');
 
       try {
         if (btc) {
-          dec = bech32.BitcoinAddress.decode(encoded.val());
-          scriptVersion.val(dec.scriptVersion);
-
-          var selectedNetwork = (dec.prefix === 'bc') ? $('#btc-mainnet') : $('#btc-testnet');
-          $('input[name=btc-network-options]').parent().removeClass('active');
-          selectedNetwork.prop('checked', true);
-          selectedNetwork.parent().addClass('active');
+          dec = bech32.BitcoinAddress.decode(encoded.value);
+          scriptVersion.value = dec.scriptVersion;
+
+          const selectedNetwork = (dec.prefix === 'bc')
+            ? document.getElementById('btc-mainnet')
+            : document.getElementById('btc-testnet');
+          document.querySelector('input[name=btc-network-options]').parentElement.classList.remove('active');
+          selectedNetwork.checked = true;
+          selectedNetwork.parentElement.classList.add('active');
         } else {
-          dec = bech32.decode(encoded.val());
-          hrp.val(dec.prefix);
-
-          var selectedEncoding = (dec.encoding === 'bech32') ? $('#encoding-bech32') : $('#encoding-bech32m');
-          $('input[name=encoding-options]').parent().removeClass('active');
-          selectedEncoding.prop('checked', true);
-          selectedEncoding.parent().addClass('active');
+          dec = bech32.decode(encoded.value);
+          hrp.value = dec.prefix;
+
+          const selectedEncoding = (dec.encoding === 'bech32')
+            ? document.getElementById('encoding-bech32')
+            : document.getElementById('encoding-bech32m');
+          document.querySelector('input[name=encoding-options]').parentElement.classList.remove('active');
+          selectedEncoding.checked = true;
+          selectedEncoding.parentElement.classList.add('active');
         }
-        data.val(toHexString(dec.data));
+        data.value = toHexString(dec.data);
       } catch (e) {
         report('danger', decodeBtn, 'Error: ' + e.message);
         return;
@@ -308,38 +322,31 @@ <h3 class="card-header align-header-height">Bech32</h3>
 
       report('success', decodeBtn, 'Data decoded (' + dec.data.length + ' bytes)');
       const qr = qrcode(0, 'M');
-      qr.addData(encoded.val().toUpperCase(), 'Alphanumeric');
+      qr.addData(encoded.value.toUpperCase(), 'Alphanumeric');
       qr.make();
-      $('#qrcode').html(qr.createSvgTag(4, 0));
-    });
-
-    $('#encode,#decode').each(function () {
-      this.customPopover = new bootstrap.Popover(this, {
-        trigger: 'manual',
-        html: true
-      });
-    });
+      document.getElementById('qrcode').innerHTML = qr.createSvgTag(4, 0);
+    };
 
-    randomBtn.click(function(e) {
+    randomBtn.onclick = (e) => {
       e.preventDefault();
-      const btc = $('#encode-btc').hasClass('active');
+      const btc = document.getElementById('encode-btc').classList.contains('active');
 
       // Not secure! Don't use in production.
-      const length = (btc && parseInt(scriptVersion.val()) === 0)
+      const length = (btc && parseInt(scriptVersion.value) === 0)
         ? (Math.random() > 0.5 ? 32 : 20)
         : 8 + Math.floor(Math.random() * 32);
       const buffer = new Uint8Array(length);
       for (let i = 0; i < length; i++) {
         buffer[i] = Math.floor(Math.random() * 256);
       }
-      data.val(toHexString(buffer));
-    });
-
-    scriptVersion.change(function() {
-      const version = parseInt(scriptVersion.val());
-      if (version < 0) scriptVersion.val(0);
-      if (version > 16) scriptVersion.val(16);
-    });
+      data.value = toHexString(buffer);
+    };
+
+    scriptVersion.onchange = () => {
+      const version = parseInt(scriptVersion.value);
+      if (version < 0) scriptVersion.value = 0;
+      if (version > 16) scriptVersion.value = 16;
+    };
   })();
   </script>
 </body>
diff --git a/package-lock.json b/package-lock.json
index 89b1f54..2f707bc 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,10 +24,10 @@
         "chai-bytes": "^0.1.2",
         "cross-env": "^7.0.3",
         "dirty-chai": "^2.0.1",
-        "eslint": "^8.48.0",
+        "eslint": "^8.50.0",
         "eslint-config-airbnb-base": "^15.0.0",
         "eslint-plugin-import": "^2.24.2",
-        "flow-bin": "^0.216.1",
+        "flow-bin": "^0.217.0",
         "karma": "^6.4.0",
         "karma-browserify": "^8.0.0",
         "karma-chrome-launcher": "^3.2.0",
@@ -1967,9 +1967,9 @@
       }
     },
     "node_modules/@eslint/js": {
-      "version": "8.49.0",
-      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.49.0.tgz",
-      "integrity": "sha512-1S8uAY/MTJqVx0SC4epBq+N2yhuwtNwLbJYNZyhL2pO1ZVKn5HFXav5T41Ryzy9K9V7ZId2JB2oy/W4aCd9/2w==",
+      "version": "8.50.0",
+      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.50.0.tgz",
+      "integrity": "sha512-NCC3zz2+nvYd+Ckfh87rA47zfu2QsQpvc6k1yzTk+b9KzRj0wkGa8LSoGOXN6Zv4lRf/EIoZ80biDh9HOI+RNQ==",
       "dev": true,
       "engines": {
         "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
@@ -4130,15 +4130,15 @@
       }
     },
     "node_modules/eslint": {
-      "version": "8.49.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.49.0.tgz",
-      "integrity": "sha512-jw03ENfm6VJI0jA9U+8H5zfl5b+FvuU3YYvZRdZHOlU2ggJkxrlkJH4HcDrZpj6YwD8kuYqvQM8LyesoazrSOQ==",
+      "version": "8.50.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.50.0.tgz",
+      "integrity": "sha512-FOnOGSuFuFLv/Sa+FDVRZl4GGVAAFFi8LecRsI5a1tMO5HIE8nCm4ivAlzt4dT3ol/PaaGC0rJEEXQmHJBGoOg==",
       "dev": true,
       "dependencies": {
         "@eslint-community/eslint-utils": "^4.2.0",
         "@eslint-community/regexpp": "^4.6.1",
         "@eslint/eslintrc": "^2.1.2",
-        "@eslint/js": "8.49.0",
+        "@eslint/js": "8.50.0",
         "@humanwhocodes/config-array": "^0.11.11",
         "@humanwhocodes/module-importer": "^1.0.1",
         "@nodelib/fs.walk": "^1.2.8",
@@ -4851,9 +4851,9 @@
       "dev": true
     },
     "node_modules/flow-bin": {
-      "version": "0.216.1",
-      "resolved": "https://registry.npmjs.org/flow-bin/-/flow-bin-0.216.1.tgz",
-      "integrity": "sha512-mdhkQiSSZ/nyPq/pmk2tdbV3btYTlTYqBT/96nSSTGQmvTWQ0no9XMLZ/SygNafL4PPerfkpwQwprA1M35+9Bg==",
+      "version": "0.217.0",
+      "resolved": "https://registry.npmjs.org/flow-bin/-/flow-bin-0.217.0.tgz",
+      "integrity": "sha512-AbbDE6QUpR+jpY9ejNROAk0P5D/2PxJzjU4D5vfmMwtS+QjjPjzfZGuatEJIn2k4PTZ2agbncaCtyHGO0AvG7A==",
       "dev": true,
       "bin": {
         "flow": "cli.js"
@@ -11036,9 +11036,9 @@
       }
     },
     "@eslint/js": {
-      "version": "8.49.0",
-      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.49.0.tgz",
-      "integrity": "sha512-1S8uAY/MTJqVx0SC4epBq+N2yhuwtNwLbJYNZyhL2pO1ZVKn5HFXav5T41Ryzy9K9V7ZId2JB2oy/W4aCd9/2w==",
+      "version": "8.50.0",
+      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.50.0.tgz",
+      "integrity": "sha512-NCC3zz2+nvYd+Ckfh87rA47zfu2QsQpvc6k1yzTk+b9KzRj0wkGa8LSoGOXN6Zv4lRf/EIoZ80biDh9HOI+RNQ==",
       "dev": true
     },
     "@humanwhocodes/config-array": {
@@ -12839,15 +12839,15 @@
       "dev": true
     },
     "eslint": {
-      "version": "8.49.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.49.0.tgz",
-      "integrity": "sha512-jw03ENfm6VJI0jA9U+8H5zfl5b+FvuU3YYvZRdZHOlU2ggJkxrlkJH4HcDrZpj6YwD8kuYqvQM8LyesoazrSOQ==",
+      "version": "8.50.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.50.0.tgz",
+      "integrity": "sha512-FOnOGSuFuFLv/Sa+FDVRZl4GGVAAFFi8LecRsI5a1tMO5HIE8nCm4ivAlzt4dT3ol/PaaGC0rJEEXQmHJBGoOg==",
       "dev": true,
       "requires": {
         "@eslint-community/eslint-utils": "^4.2.0",
         "@eslint-community/regexpp": "^4.6.1",
         "@eslint/eslintrc": "^2.1.2",
-        "@eslint/js": "8.49.0",
+        "@eslint/js": "8.50.0",
         "@humanwhocodes/config-array": "^0.11.11",
         "@humanwhocodes/module-importer": "^1.0.1",
         "@nodelib/fs.walk": "^1.2.8",
@@ -13389,9 +13389,9 @@
       "dev": true
     },
     "flow-bin": {
-      "version": "0.216.1",
-      "resolved": "https://registry.npmjs.org/flow-bin/-/flow-bin-0.216.1.tgz",
-      "integrity": "sha512-mdhkQiSSZ/nyPq/pmk2tdbV3btYTlTYqBT/96nSSTGQmvTWQ0no9XMLZ/SygNafL4PPerfkpwQwprA1M35+9Bg==",
+      "version": "0.217.0",
+      "resolved": "https://registry.npmjs.org/flow-bin/-/flow-bin-0.217.0.tgz",
+      "integrity": "sha512-AbbDE6QUpR+jpY9ejNROAk0P5D/2PxJzjU4D5vfmMwtS+QjjPjzfZGuatEJIn2k4PTZ2agbncaCtyHGO0AvG7A==",
       "dev": true
     },
     "follow-redirects": {
diff --git a/package.json b/package.json
index e39024d..c032e33 100644
--- a/package.json
+++ b/package.json
@@ -60,10 +60,10 @@
     "chai-bytes": "^0.1.2",
     "cross-env": "^7.0.3",
     "dirty-chai": "^2.0.1",
-    "eslint": "^8.48.0",
+    "eslint": "^8.50.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.24.2",
-    "flow-bin": "^0.216.1",
+    "flow-bin": "^0.217.0",
     "karma": "^6.4.0",
     "karma-browserify": "^8.0.0",
     "karma-chrome-launcher": "^3.2.0",