mirrors/arti.git/maint/downgrade_dependencies, branch arti-v1.0.1 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.0.1 2022-07-06T13:57:45Z Update `rsa` dependency (and use `x25519-dalek` prerelease) 2022-07-06T13:57:45Z eta tor@eta.st 2022-07-05T10:57:10Z urn:sha1:c2e2da5dc35b2e0aa4cc17865ec4d14c725558c7 - arti#448 and arti!607 highlight an issue with upgrading `rsa`: namely, the `x25519-dalek` version previously used has a hard dependency on `zeroize` 1.3, which creates a dependency conflict. - However, `x25519-dalek` version `2.0.0-pre.1` relaxes this dependency. Reviewing the changelogs, it doesn't look like that version is substantially different from the current one at all, so it should be safe to use despite the "prerelease" tag. - The new `x25519-dalek` version also bumps `rand_core`, which means we don't have to use the RNG compat wrapper in `tor-llcrypto` as much. closes arti#448 make almost all scripts use bash and set euo pipefail 2022-05-25T20:25:58Z trinity-1686a trinity@deuxfleurs.fr 2022-05-25T11:10:55Z urn:sha1:8eb843f2af349e4dbbd377a4c16fa57094c90414 Merge branch 'explain_downgrade' into 'main' 2022-05-03T10:57:48Z eta tor@eta.st 2022-05-03T10:57:48Z urn:sha1:78ca87314cfbb1fea801a929fe519b67919d1157 Add a comment explaining what downgrade_dependencies is for. See merge request tpo/core/arti!480 remove some unecessary crates from downgrade_dependencies 2022-04-28T18:50:50Z trinity-1686a trinity@deuxfleurs.fr 2022-04-28T16:21:24Z urn:sha1:0fea8535dfbd9001653f74cb8ea1288a75d65f75 nix:0.4.2 is no longer a dependency synstructure:0.12.0 is no longer required to build Add a comment explaining what downgrade_dependencies is for. 2022-04-28T18:23:50Z Nick Mathewson nickm@torproject.org 2022-04-28T18:23:50Z urn:sha1:6fecbc721aa4861599d3d497a7bfa01db28145c0 downgrade_dependencies: Remove "quote" exception. 2022-04-26T16:16:22Z Nick Mathewson nickm@torproject.org 2022-04-26T13:33:08Z urn:sha1:0425de104cb51cd0eec99d92bd8ae0543f3040d3 This is no longer necessary. :) Use git source for derive_builder for now, for sub_builder feature 2022-04-21T13:07:28Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-04-21T11:03:36Z urn:sha1:6da7a2e3e2c33b4a1448632a41e11210690c6f52 This commitid is the current head of my MR branch https://github.com/colin-kiegel/rust-derive-builder/pull/253 https://github.com/ijackson/rust-derive-builder/tree/field-builder Using the commitid prevents surprises if that branch is updated. We will require this newer version of derive_builder. The version will need to be bumped again later, assuming the upstream MR is merged and upstream do a release containing the needed changes. We will need the new version of not only `derive_builder_core` (the main macro implementation) but also`derive_builder` for a new error type. downgrade_dependencies: Upgrade darling 2022-03-16T16:34:44Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-03-16T16:33:09Z urn:sha1:8a5d98f716528bfd3e8d11bef9e0a37280998df8 The new version of derive_builder requires a newer darling. Ooops. Upstream MR here: https://github.com/colin-kiegel/rust-derive-builder/pull/242 For now, upgrade darling. When there's a new upstream derive_builder, we can use it and drop this. Add nix exception to downgrade_dependencies. 2022-02-28T18:25:14Z Nick Mathewson nickm@torproject.org 2022-02-28T18:25:14Z urn:sha1:c646d3adca46c162737a2729226c085405c310f7 maint/downgrade_dependencies: Upgrade zeroize_derive, env_logger 2022-02-28T17:11:59Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-02-28T17:09:58Z urn:sha1:9618f85237998df37d540ee12568798e8346c820 The *earlier* versions of these crates pull in *dependencies* that violate our MSRV policy by requiring a *later* version of Rust. Empirically, env_logger 0.5.4 would be enough, but practice here seems to be to just say "cargo update".