summaryrefslogtreecommitdiff
path: root/maint
Commit message (Collapse)AuthorAgeFilesLines
* release: Bump tor- and arti- crate versions.Wesley Aptekar-Cassels2026-05-062-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cargo set-version -p arti-client 0.42.0 cargo set-version -p arti-config 0.42.0 cargo set-version -p arti-relay 0.42.0 cargo set-version -p arti-rpc-client-core 0.42.0 cargo set-version -p arti-rpcserver 0.42.0 cargo set-version -p arti-testing 0.42.0 cargo set-version -p arti-ureq 0.42.0 cargo set-version -p tor-async-utils 0.42.0 cargo set-version -p tor-basic-utils 0.42.0 cargo set-version -p tor-bytes 0.42.0 cargo set-version -p tor-cell 0.42.0 cargo set-version -p tor-cert 0.42.0 cargo set-version -p tor-cert-x509 0.42.0 cargo set-version -p tor-chanmgr 0.42.0 cargo set-version -p tor-checkable 0.42.0 cargo set-version -p tor-circmgr 0.42.0 cargo set-version -p tor-config 0.42.0 cargo set-version -p tor-config-path 0.42.0 cargo set-version -p tor-consdiff 0.42.0 cargo set-version -p tor-dirclient 0.42.0 cargo set-version -p tor-dircommon 0.42.0 cargo set-version -p tor-dirmgr 0.42.0 cargo set-version -p tor-dirserver 0.42.0 cargo set-version -p tor-error 0.42.0 cargo set-version -p tor-events 0.42.0 cargo set-version -p tor-general-addr 0.42.0 cargo set-version -p tor-geoip 0.42.0 cargo set-version -p tor-guardmgr 0.42.0 cargo set-version -p tor-hsclient 0.42.0 cargo set-version -p tor-hscrypto 0.42.0 cargo set-version -p tor-hsrproxy 0.42.0 cargo set-version -p tor-hsservice 0.42.0 cargo set-version -p tor-key-forge 0.42.0 cargo set-version -p tor-keymgr 0.42.0 cargo set-version -p tor-linkspec 0.42.0 cargo set-version -p tor-llcrypto 0.42.0 cargo set-version -p tor-log-ratelim 0.42.0 cargo set-version -p tor-memquota 0.42.0 cargo set-version -p tor-memquota-cost 0.42.0 cargo set-version -p tor-netdir 0.42.0 cargo set-version -p tor-netdoc 0.42.0 cargo set-version -p tor-persist 0.42.0 cargo set-version -p tor-proto 0.42.0 cargo set-version -p tor-protover 0.42.0 cargo set-version -p tor-ptmgr 0.42.0 cargo set-version -p tor-relay-crypto 0.42.0 cargo set-version -p tor-relay-selection 0.42.0 cargo set-version -p tor-rpcbase 0.42.0 cargo set-version -p tor-rpc-connect 0.42.0 cargo set-version -p tor-rtcompat 0.42.0 cargo set-version -p tor-rtmock 0.42.0 cargo set-version -p tor-socksproto 0.42.0 cargo set-version -p tor-units 0.42.0
* Merge branch 'osx_document_upgrade' into 'main'Ian Jackson2026-04-291-3/+13
|\ | | | | | | | | | | | | reproducible-build: Document how to upgrade the OSX SDK version Closes #2444 See merge request tpo/core/arti!3921
| * reproducible-build: Document how to upgrade the OSX SDK versionNick Mathewson2026-04-261-3/+13
| | | | | | | | Closes #2444.
* | dependencies-bodge: remove bodge for security-frameworkNick Mathewson2026-04-281-2/+5
|/ | | | | | | Now that we've updated to MACOS_DEPLOYMENT_TARGET 10.15 (see !3920) we can use more recent versions of the security-framework crate. Closes #2387.
* Remove now-false comment in reproducible-build.Nick Mathewson2026-04-261-1/+0
|
* Update MACOS_DEPLOYMENT_TARGET to 10.14Nick Mathewson2026-04-251-1/+1
| | | | | | | | | | | | | This gives our reproducible-build tools permission to use APIs introduced in versions up to 10.14. Previously, we had this set to 10.12, which is the oldest version supported by Rust. Upgrading to 10.14 will allow us to merge !3817, and to upgrade security-framework to the latest version (#2387). OSX 10.14 ("Mojave") was released in September 2018, and hasn't been officially supported since October 2021. IMO it's a fine "very old version" for now.
* reproducible-build: version the osxcross directory.Nick Mathewson2026-04-181-7/+7
| | | | | | This patch puts the osx tools build (which gets cached) into a directory that includes the SDK version, so that we don't get confused with older or newer SDK builds.
* Update the OSX SDK in our reproducible build.Nick Mathewson2026-04-171-15/+54
| | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: - Update the build target to 10.12, and define it in a single place. (We had 10.7 before, but Rust only supports 10.12 and higher. We will probably want to update this to something even more recent soon. - Use the default clang c++ library, rather than trying to force libstdc++, which OSX dropped after the 10.13 SDK. - Use the same clang++ for compilation and linking. - Use the 15.5 SDK. - Use a copy of the SDK with a known source. Specifically we start with the the pkg file from Apple, as cached by the TBB team on `build-sources.tbb.tpo`. Using a pkg file means that we have to run a script from them the tor-browser-build repository to extract the SDK files, and then run the osxcross script that repackages that SDK as a tar.xz file. I believe our script will make sure this gets cached. - Stop trying to use define an `ar`; nothing needs it.
* docker-reproducible-build: Fix script name.Nick Mathewson2026-04-171-1/+1
|
* Ignore RUSTSEC-2026-0097, for the benefit of rand 0.8.x.Ian Jackson2026-04-131-0/+7
|
* Merge branch 'rustls-defaults' into 'main'Nick Mathewson2026-04-081-7/+1
|\ | | | | | | | | | | | | Allow compile-time selection of rustls CryptoProvider; use aws-lc-rs by default. Closes #2448 See merge request tpo/core/arti!3857
| * check-licenses: Remove aws-lc-rs exception.Nick Mathewson2026-04-081-7/+1
| | | | | | | | | | They have finally updated their license to remove the old OpenSSL/4-clause BSD text. (See https://github.com/aws/aws-lc/pull/3091 .)
* | Merge branch 'update-rust' into 'main'Ian Jackson2026-04-021-1/+1
|\ \ | | | | | | | | | | | | Update CI images for Rust and Alpine See merge request tpo/core/arti!3839
| * | CI: Update Rust to 1.94.1Ian Jackson2026-04-021-1/+1
| | |
| * | CI: Also update Rust Alpine image in docker-reproducible-buildIan Jackson2026-04-021-1/+1
| | |
* | | maint: `set -o xtrace` to `set -x`Clara Engler2026-04-022-4/+2
| | |
* | | maint: Use xtrace instead of echo in hooksClara Engler2026-04-012-12/+2
| |/ |/| | | | | | | | | This commit replaces our own calls of echo by simply adding `set -o xtrace` to the top of the shell scripts, which achieves exactly the same but in a native way.
* | maint/dependencies-bodge: Be more explicit that there should be no codeIan Jackson2026-03-311-1/+1
| |
* | Use maint/dependencies-bodge to work around security-framework FTBFSIan Jackson2026-03-311-0/+2
| | | | | | | | | | Works around #2387. Empirically, with this, cargo update no longer wants to update this crate to the broken version.
* | Introduce maint/dependencies-bodge crateIan Jackson2026-03-312-0/+20
| |
* | Merge branch 'audit' into 'main'Ian Jackson2026-03-311-4/+22
|\ \ | | | | | | | | | | | | cargo audit exception list review See merge request tpo/core/arti!3841
| * | cargo-audit: Add TODO DIRAUTH for Marvin attackIan Jackson2026-03-311-4/+12
| | |
| * | cargo-audit: Add blank lines to make it more readable.Ian Jackson2026-03-311-0/+10
| |/
* | maint/cargo-sort: Say that you must use the right versionIan Jackson2026-03-311-0/+3
| |
* | maint/cargo-sort: InstructionsIan Jackson2026-03-311-0/+5
| |
* | maint/cargo-sort: Honour CARGO env varIan Jackson2026-03-311-1/+1
|/
* Bump versions: tor-* and arti-* unstable cratesIan Jackson2026-03-302-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As per https://gitlab.torproject.org/tpo/core/arti/-/issues/2436#note_3384773 Made with nailing-cargo -Eu set-version -p arti-client 0.41.0 nailing-cargo -Eu set-version -p arti-relay 0.41.0 nailing-cargo -Eu set-version -p arti-rpcserver 0.41.0 nailing-cargo -Eu set-version -p arti-ureq 0.41.0 nailing-cargo -Eu set-version -p arti-rpc-client-core 0.41.0 nailing-cargo -Eu set-version -p tor-basic-utils 0.41.0 nailing-cargo -Eu set-version -p tor-error 0.41.0 nailing-cargo -Eu set-version -p tor-general-addr 0.41.0 nailing-cargo -Eu set-version -p tor-geoip 0.41.0 nailing-cargo -Eu set-version -p tor-memquota-cost 0.41.0 nailing-cargo -Eu set-version -p tor-llcrypto 0.41.0 nailing-cargo -Eu set-version -p tor-cert-x509 0.41.0 nailing-cargo -Eu set-version -p tor-rtcompat 0.41.0 nailing-cargo -Eu set-version -p tor-rtmock 0.41.0 nailing-cargo -Eu set-version -p tor-async-utils 0.41.0 nailing-cargo -Eu set-version -p tor-config 0.41.0 nailing-cargo -Eu set-version -p tor-config-path 0.41.0 nailing-cargo -Eu set-version -p tor-rpc-connect 0.41.0 nailing-cargo -Eu set-version -p tor-log-ratelim 0.41.0 nailing-cargo -Eu set-version -p tor-rpcbase 0.41.0 nailing-cargo -Eu set-version -p tor-memquota 0.41.0 nailing-cargo -Eu set-version -p tor-units 0.41.0 nailing-cargo -Eu set-version -p tor-bytes 0.41.0 nailing-cargo -Eu set-version -p tor-protover 0.41.0 nailing-cargo -Eu set-version -p tor-checkable 0.41.0 nailing-cargo -Eu set-version -p tor-cert 0.41.0 nailing-cargo -Eu set-version -p tor-key-forge 0.41.0 nailing-cargo -Eu set-version -p tor-hscrypto 0.41.0 nailing-cargo -Eu set-version -p tor-socksproto 0.41.0 nailing-cargo -Eu set-version -p tor-linkspec 0.41.0 nailing-cargo -Eu set-version -p tor-cell 0.41.0 nailing-cargo -Eu set-version -p tor-persist 0.41.0 nailing-cargo -Eu set-version -p tor-keymgr 0.41.0 nailing-cargo -Eu set-version -p tor-relay-crypto 0.41.0 nailing-cargo -Eu set-version -p tor-proto 0.41.0 nailing-cargo -Eu set-version -p tor-netdoc 0.41.0 nailing-cargo -Eu set-version -p tor-consdiff 0.41.0 nailing-cargo -Eu set-version -p tor-netdir 0.41.0 nailing-cargo -Eu set-version -p tor-relay-selection 0.41.0 nailing-cargo -Eu set-version -p tor-chanmgr 0.41.0 nailing-cargo -Eu set-version -p tor-ptmgr 0.41.0 nailing-cargo -Eu set-version -p tor-dircommon 0.41.0 nailing-cargo -Eu set-version -p tor-guardmgr 0.41.0 nailing-cargo -Eu set-version -p tor-circmgr 0.41.0 nailing-cargo -Eu set-version -p tor-dirclient 0.41.0 nailing-cargo -Eu set-version -p tor-dirmgr 0.41.0 nailing-cargo -Eu set-version -p tor-dirserver 0.41.0 nailing-cargo -Eu set-version -p tor-hsclient 0.41.0 nailing-cargo -Eu set-version -p tor-hsservice 0.41.0 nailing-cargo -Eu set-version -p tor-hsrproxy 0.41.0
* Run cargo sort --workspace and commit the parts we wantIan Jackson2026-03-301-1/+2
|
* Add missing full feature to maint/keygen-client-auth-testIan Jackson2026-03-301-0/+7
| | | | As generated by maint/fixup-features.
* Fix typosTobias Stoeckmann2026-03-242-4/+4
| | | | Typos found with codespell
* keymgr, key-forge: Use our ssh-* forksGabriela Moldovan2026-03-161-1/+1
| | | | | | | | | | | | | | | | Upstream `ssh-key` is missing some important features we need for arti-relay: * a bug fix without which we can't convert deserialized RSA keys to their rsa counterparts: https://github.com/RustCrypto/SSH/pull/318 * @wesleyac 's patch https://github.com/RustCrypto/SSH/pull/412 for allowing insecure (1024 bits long) RSA keys (needed because the relay KS_relayid_rsa identity keys are 1024 bits long) We plan to switch back to mainline `ssh-key` when `ssh-key 0.7.0` comes out. See the discussion in #2398 for more details.
* Fix word duplicate typosTobias Stoeckmann2026-03-151-1/+1
|
* chutney scripts: opt into strict typecheckingJim Newsome2026-03-091-0/+6
|
* Bump toml_edit to 0.25.3Gabriela Moldovan2026-03-041-1/+1
|
* python-lints: work around mypy import bug 20962Jim Newsome2026-03-031-4/+17
| | | | | | | | | | | | | | When analyzing a script, mypy *should* look in the script's directory for imports, but appears not to do so when the script doesn't have a .py extension: https://github.com/python/mypy/issues/20962 We can work around that by adding the script's directory to MYPYPATH. With that workaround, we no longer need to add OTHER_PYTHON files to every invocation when analyzing scripts. That also worked around the problem in some cases, but experimentally not when the script is more than one subdirectory deep (?!)
* Bump all the unstable tor- and arti- crates to 0.40.0.Gabriela Moldovan2026-03-022-6/+6
| | | | | | | | | Done using: ``` for crate in $(./maint/list_crates | rg '^(tor|arti-)'); do cargo set-version -p $crate 0.40.0 done
* Bump the versions of the non-{arti-,tor-} cratesGabriela Moldovan2026-03-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The non-{arti-,tor-} crates are: ``` ./maint/list-crates | rg -v '^(tor|arti)' oneshot-fused-workaround slotmap-careful test-temp-dir fslock-guard hashx equix caret fs-mistrust safelog retry-error futures-copy ``` Because this release bumps the MSRV, I am bumping the minor version of all of them. MINOR=" oneshot-fused-workaround slotmap-careful test-temp-dir fslock-guard hashx equix caret fs-mistrust safelog retry-error futures-copy " for crate in $MINOR; do cargo set-version --bump minor -p $crate; done ```
* Allow clippy::collapsible_if to triggerGabriela Moldovan2026-02-162-0/+2
| | | | | | | | | `clippy::collapsible_if` started triggering after bumping the MSRV to 1.88. Since this triggers from a lot of places, and since there even are a couple of instances where we explicitly allow `clippy::collapsible_ifs`, I've opened #2342 for deciding what to do about it.
* Bump MSRV from 1.86 to 1.89Gabriela Moldovan2026-02-164-4/+4
| | | | | | | As agreed at our last team meeting. See https://gitlab.torproject.org/tpo/core/arti/#minimum-supported-rust-version
* Bump time to 0.3.47Gabriela Moldovan2026-02-161-7/+0
| | | | | | This enables us to un-ignore RUSTSEC-2026-0009. See #2341 for analysis of impact.
* Merge branch 'bump-min-async-io' into 'main'David Goulet2026-02-091-0/+8
|\ | | | | | | | | | | | | downgrade-dependencies: require async-io 1.1.5. Closes #1168 See merge request tpo/core/arti!3660
| * downgrade-dependencies: require async-io 1.1.5.Nick Mathewson2026-02-091-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In my testing, this appears to fix #1168, an intermittent test failure. The underlying cause of the failure appears to be a surprise blocking return old async-io versions: > The problem was in that random yielding inside > AsyncRead/AsyncWrite (which is supposed to prevent task starvation > when I/O never returns the WouldBlock error) doesn't play nice > with the TLS protocol. It seems that TLS handshake fails if a > write errors with WouldBlock. -- https://github.com/smol-rs/async-io/issues/31 I think the problem here might actually be something more subtle than _that_, since WouldBlock on an underlying write is totally legit. But this appears to fix the testing issue at least.
* | Merge branch 'cargo-metadata-all-features' into 'main'Nick Mathewson2026-02-091-0/+38
|\ \ | | | | | | | | | | | | | | | | | | Set package.metadata.docs.rs.all-features to true for all crates Closes #2307 See merge request tpo/core/arti!3656
| * | ci: Check crates configure features published to docs.rsNiel Duysters2026-02-091-0/+38
| |/ | | | | | | | | | | All (publishable) crates should explicitly configure what features to (not) document in docs.rs. This to avoid our documentation containing references to public API specifications which yield "given resource not found" due to them being behind a feature flag not being published to docs.rs by default.
* / maint/cargo-audit: Ignore RUSTSEC-2026-0009 for nowGabriela Moldovan2026-02-091-0/+7
|/ | | | | See https://gitlab.torproject.org/tpo/core/arti/-/issues/2341#note_3339657
* release: Bump `arti-*` and `tor-*` crates to 0.39.0Wesley Aptekar-Cassels2026-02-022-6/+6
| | | | | | | | | | Done via: ``` for crate in $(./maint/list-crates | rg '^(tor|arti-)'); do cargo set-version -p $crate 0.39.0 done ```
* Merge branch 'main' into 'main'gabi-2502026-02-021-2/+1
|\ | | | | | | | | fix(minver): Update paste dependency to be minver compatible See merge request tpo/core/arti!3610
| * Remove paste from downgrade-dependenciessjcobb2026-02-021-2/+1
| |
* | Add integration test suite for `hsc ctor-migrate` subcommandhjrgrn2026-02-025-0/+180
| |
* | maint/add_warning: Run script to add new warningGabriela Moldovan2026-01-271-0/+1
| | | | | | | | This adds the lint to all our crates.
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-26 17:19:16 +0000