summaryrefslogtreecommitdiff
path: root/Cargo.lock
Commit message (Collapse)AuthorAgeFilesLines
* Bump arti crate to 1.4.2Gabriela Moldovan2025-03-311-1/+1
| | | | | | | | Done using: ``` cargo set-version --bump patch -p arti ```
* Bump all the unstable tor- and arti- crates to 0.29.0.Gabriela Moldovan2025-03-311-45/+45
| | | | | | | | | | Done using: ``` for crate in $(./maint/list_crates | rg '^(tor|arti-)'); do cargo set-version -p $crate 0.29.0 done ```
* Bump the versions of the non-{arti-,tor-} crates.Gabriela Moldovan2025-03-311-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The non-{arti-,tor-} crates are: ``` ./maint/list_crates | rg -v '^(tor|arti)' oneshot-fused-workaround slotmap-careful test-temp-dir fslock-guard hashx equix caret fs-mistrust safelog retry-error ``` We split them in the following categories: * crates with no changes (no version bumps): ``` maint/changed_crates -v "arti-v$LAST_VERSION" 2>&1 >/dev/null | grep -i "no change" | grep -v '\(tor\|arti\)-' oneshot-fused-workaround: No change. slotmap-careful: No change. fslock-guard: No change. caret: No change. retry-error: No change. ``` * crates that only have non-functional changes (bump the patch version): - test-temp-dir - equix - fs-mistrust - safelog * crates where APIs were broken (bump minor): - hashx (`RngCore` impl for `SipRand`) The bumps from this commit were created using this script: ``` PATCH=" test-temp-dir equix fs-mistrust safelog " for crate in $PATCH; do cargo set-version --bump patch -p $crate; done MINOR=" hashx " for crate in $MINOR; do cargo set-version --bump minor -p $crate; done ```
* Run cargo update in preparation for release.Gabriela Moldovan2025-03-271-405/+465
|
* Upgrade getrandom dependency to 0.3.2Gabriela Moldovan2025-03-271-15/+19
| | | | | | | | | The `js` feature was replaced by a configuration flag in [0.3.0], so I've checked in a `.cargo/config.toml` for `tor-llcrypto` and `tor-bytes` with `RUSTFLAGS` for selecting the `getrandom` backend to use on wasm32. [0.3.0]: https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md#030---2025-01-25
* Upgrade rustls-wekpki dependency to 0.103.1.Gabriela Moldovan2025-03-271-2/+13
| | | | | | We aren't affected by any of the breaking changes from [0.103.0]. [0.103.0]: https://github.com/rustls/webpki/releases/tag/v%2F0.103.0
* Upgrade strum dependency to 0.27.1.Gabriela Moldovan2025-03-271-36/+14
| | | | | | | | | In 0.27.0, strum's MSRV was bumped to 1.66.1, but that's okay because ours is 1.77. We aren't affected by any of its [breaking changes]. [breaking changes]: https://github.com/Peternator7/strum/blob/master/CHANGELOG.md#0270
* Use CautiousRng for keys going into the KeyMgr.Nick Mathewson2025-03-241-0/+1
|
* llcrypto: new CautiousRng for constructing long-lived keysNick Mathewson2025-03-241-0/+24
| | | | | | This Rng combines inputs from several sources, including OsRng, to minimize the likelihood of falling to a vulnerability in any particular one.
* Merge branch 'named_protovers' into 'main'David Goulet2025-03-201-0/+1
|\ | | | | | | | | | | | | protover: Add support for subprotocol version mnemonics. Closes #1891 See merge request tpo/core/arti!2854
| * protover: Add support for subprotocol version mnemonics.Nick Mathewson2025-03-121-0/+1
| | | | | | | | | | | | | | | | It's error-prone to have to remember e.g. that "Desc=5" means "family ID support", so in torspec!251 we added mnemonic names like DESC_FAMILY_IDS. Here we use those names in tor-protover.
* | llcrypto: add an rng compatibility shim for dalek-cryptoNick Mathewson2025-03-181-0/+1
| | | | | | | | | | | | | | | | | | dalek-cryptography is still on rand 0.8, so we need a compatibility shim for the Rng. Fortunately, since we merged interface-abstraction-of-the-daleks (!2868), we no longer need to propagate this compatibility layer throughout our codebase.
* | Upgrade rand dependency to 0.9.Nick Mathewson2025-03-181-58/+108
| | | | | | | | | | | | (Per discussion at #1774, we think the changes are acceptable.) This commit won't compile on its own; subsequent commits will fix it.
* | netdoc: Reject BOMs and NULs.Nick Mathewson2025-03-171-0/+1
|/ | | | | | | | | | | | Per <https://spec.torproject.org/dir-spec/netdoc.html>, our netdocs never have a BOM, and never have internal NULs. This makes Arti reject such documents. For arguments on why it's okay to increase parser strictness, see the (forthcoming) proposal 356 at torspec!342, and see older discussion at torspec#296. Closes #1739.
* cargo_audit: Bump ring to 0.17.13.Gabriela Moldovan2025-03-101-2/+2
| | | | | | | | | | | | | | | `ring` versions < 0.17.12 are affected by [RUSTSEC-2025-0009] (potential panic when overflow checks are enabled). I don't believe we are affected, because * we don't use `ring::aead::quic::HeaderProtectionKey::new_mask` * operations using `ring::aead::{AES_128_GCM, AES_256_GCM}` can panic only in very specific circumstances, namely when encrypting/decrypting 64 gigabytes of data in one go, if overflow checks are enabled (and Arti never buffers that much data) [RUSTSEC-2025-0009]: https://rustsec.org/advisories/RUSTSEC-2025-0009
* sqlite: Handle vanished blobs during consensus loadingNick Mathewson2025-03-051-0/+1
| | | | | | | | | Here we move the responsibility for removing ExtDoc entries for vanished blobs into the _caller_ of read_blob(): we want to tidy all such entries in one go. Unlike a (reverted) previous approach, this time we don't need a retry loop.
* Merge branch 'x509-signature-yeet' into 'main'Nick Mathewson2025-03-051-43/+146
|\ | | | | | | | | | | | | Switch from x509-signature to rustls-webpki when using rustls. Closes #1824 and #1854 See merge request tpo/core/arti!2816
| * Require rustls 0.23.20Nick Mathewson2025-03-041-0/+139
| | | | | | | | | | This is the version that introduces `root_hint_subjects()`, which we want our ServerCertVerifier to override.
| * rustls.rs: Replace x509-signature with rustls-webpkiNick Mathewson2025-03-041-43/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The x509-signature crate is archived, and won't see any more releases. Using it is tying us to ring 0.16 internally, which means we depend on two ring versions. Fortunately, rustls-webpki relaxes some of the earlier restrictions from the vanilla webpki crate, which means that its certificate parser now accepts C tor's oddball x509 certificates as valid. With this change, we can delegate to rustls's built-in signature-checking code, and we only have to override its certificate validation. (We still override it with a pile of comments about how we don't validate link certificates much.) I've had to include a few certificates: two are for tests, but one is needed as a placeholder, since we can't construct a rustls certificate validator without a root cert, even if we'll never use it. Closes #1824. Closes #1854.
* | tor-rtmocK; Detect wrong-context blocking_io and spawn_threadIan Jackson2025-03-041-0/+1
|/
* tor-congestion: remove crateSteven Engler2025-03-031-4/+0
|
* Bump arti to 1.4.1Nick Mathewson2025-03-031-1/+1
|
* Bump minor versions in tor-*, arti-*.Nick Mathewson2025-03-031-46/+46
|
* Bump patchlevel for safelog, retry-error, test-temp-dir.Nick Mathewson2025-03-031-3/+3
| | | | | These crates have upgraded to a newer derive_more, and have had no other changes.
* cargo: run 'cargo update' in preparation for releaseSteven Engler2025-02-271-112/+127
|
* Merge branch 'sync_datastream' into 'main'Nick Mathewson2025-02-271-0/+1
|\ | | | | | | | | | | | | Make DataStream, and its members, implement Sync. Closes #1859 See merge request tpo/core/arti!2808
| * Make DataStream, and its members, implement Sync.Nick Mathewson2025-02-261-0/+1
| | | | | | | | | | | | | | Also, use static_assertions to enforce that that they _stay_ Send+Sync. Closes #1859.
* | Merge branch 'reactor-confluxation' into 'main'gabi-2502025-02-271-0/+1
|\ \ | | | | | | | | | | | | tor-proto: Add ConfluxSet type in the reactor See merge request tpo/core/arti!2804
| * | tor-proto: Add a ConfluxSet type.Gabriela Moldovan2025-02-251-0/+1
| |/
* | Upgraede to der-parser 10Nick Mathewson2025-02-261-7/+7
| |
* | Upgrade to directories 6Nick Mathewson2025-02-261-3/+3
| |
* | Upgrade to derive_more 2Nick Mathewson2025-02-261-6/+6
| | | | | | | | | | This took a little refactoring, since derive_more::Foo no longer re-exports std::ops::Foo.
* | Upgrade to notify 8.Nick Mathewson2025-02-261-14/+11
|/
* Update to derive-deftly 1.0Ian Jackson2025-02-121-52/+93
| | | | | | | | | This is released now. Prepared with: cargo upgrade -i -p derive-deftly There is some new duplication now I think mostly because pwd-grp uses old derive-deftly.
* arti: upgrade 'hickory-proto' to 0.24.3Steven Engler2025-02-101-8/+8
| | | | This resolves RUSTSEC-2025-0006, which arti is not affected by.
* Bump minor version of fs-mistrustIan Jackson2025-02-071-1/+1
| | | | Fixes #1841.
* Merge branch 'versions' into 'main'Ian Jackson2025-02-061-47/+47
|\ | | | | | | | | Version bumps for 1.4.0 See merge request tpo/core/arti!2773
| * Version bumps to 0.27.0Ian Jackson2025-02-061-45/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See Release.md. maint/list_crates | grep -P '^tor-|^arti-' | xargs -n1 nailing-cargo -Eu set-version --bump minor -p This completes the version bumps. The report of changed crates, before I started the release work, is: $ maint/changed_crates -v "arti-v$LAST_VERSION" oneshot-fused-workaround: No change. slotmap-careful: No change. test-temp-dir: No change. fslock-guard: No change. hashx: No change. equix: No change. tor-basic-utils: No change. caret: No change. fs-mistrust safelog: No change. retry-error: No change. tor-error tor-general-addr: No change. tor-geoip: No change. tor-rtcompat tor-rtmock tor-async-utils tor-config tor-config-path tor-rpc-connect tor-log-ratelim: No change. tor-rpcbase tor-memquota: No change. tor-units tor-llcrypto: No change. tor-protover: No change. tor-bytes tor-checkable: No change. tor-cert tor-key-forge tor-hscrypto: No change. tor-socksproto: No change. tor-linkspec: No change. tor-cell: No change. tor-proto tor-netdoc: No change. tor-consdiff: No change. tor-netdir tor-relay-selection: No change. tor-persist tor-chanmgr tor-ptmgr: No change. tor-guardmgr: No change. tor-circmgr tor-dirclient: No change. tor-dirmgr: No change. tor-keymgr tor-hsclient tor-hsservice tor-hsrproxy: No change. tor-relay-crypto arti-client arti-relay arti-rpcserver arti arti-rpc-client-core $
| * Bump arti crate version to 1.4.0Ian Jackson2025-02-061-1/+1
| | | | | | | | | | | | And the in-tree dependencies. cargo set-version --offline --bump minor -p fs-mistrust
| * fs-mistrust: bump minor version, and in-tree depsIan Jackson2025-02-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | There are new features. cargo set-version --offline --bump minor -p fs-mistrust Actually, I have discovered by diffing that some methods now take `&self` where previously they took `self`. This will need a further bump to the fs-mistrust version and a fix to the changelog. I will do that. Filed blocker ticket #1841 for it.
* | tor-keymgr: Define the test key constants using a macro.Gabriela Moldovan2025-02-061-0/+1
|/ | | | Closes #1396
* Upgrade to dirs 6Ian Jackson2025-02-051-12/+44
| | | | No code changes needed.
* Upgrade to axum 8Ian Jackson2025-02-051-8/+7
| | | | We use this in an example only.
* Upgrade to downcast-rs 2Ian Jackson2025-02-051-2/+2
| | | | No code changes needed.
* Routine cargo updateIan Jackson2025-02-051-267/+302
|
* Rewrite download manager exampletidely2025-02-041-12/+32
|
* fix RUSTSEC-2025-0004Dimitris Apostolou2025-02-031-4/+4
|
* rpc: Strengthen guarantees from Cancel.Nick Mathewson2025-01-161-0/+1
| | | | | | | | | | | Cancellation is now fallable, which allows us to detect attempts to cancel which cannot work. We now guarantee that when you try to cancel a `Cancel<F>` future, either the cancel operation will succeed, or the future will return (or will have already returned) Ok(), but not both, and not neither. Closes #818.
* Bring back tor-congestion empty with a tombstoneDavid Goulet2025-01-161-0/+4
| | | | Signed-off-by: David Goulet <[email protected]>
* congestion: Make the cc_alg values a caret_int for better code semanticDavid Goulet2025-01-161-0/+1
| | | | Signed-off-by: David Goulet <[email protected]>
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-26 21:39:26 +0000