summaryrefslogtreecommitdiff
path: root/maint
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'version-bumps'Nick Mathewson2026-06-302-7/+7
|\
| * Version bumps for 2.5.0Nick Mathewson2026-06-302-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | Closes #2617. We've lucked out this time, and it turns out that every one of our published crates gets a minor bump. So this was generated with: ``` for cr in $(./maint/list-crates); do cargo set-version -p $cr --bump minor done ```
* | Run "fixup-features".Nick Mathewson2026-06-301-0/+3
|/
* Merge branch 'fix/add-warning-windows' into 'main'Jim Newsome2026-06-291-8/+41
|\ | | | | | | | | Add Windows compatibility for maint/add_warning See merge request tpo/core/arti!4084
| * Add Windows compatibility for maint/add_warningpryty262026-06-291-8/+41
| |
* | Bump MSRV to 1.91Clara Engler2026-06-155-5/+5
|/ | | | | | | | | | | | | | | | | | | This commit bumps the MSRV to 1.91 which was released on 2025-10-30. The Cargo.toml files were updated as follows: ```sh git ls-files | \ grep ".*Cargo\.toml$" | \ xargs sed -i '' 's/^rust-version = "1\.89"$/rust-version = "1\.91"/g' ``` The following files were updated manually: ``` modified: .gitlab-ci.yml modified: README.md modified: flake.nix modified: maint/docker-android/Dockerfile ```
* Merge branch 'bump-docker-imgs' into 'main'Ian Jackson2026-06-101-1/+1
|\ | | | | | | | | CI: Bump docker images See merge request tpo/core/arti!4078
| * CI: Bump build-repro docker images to rust 1.96Gabriela Moldovan2026-06-081-1/+1
| | | | | | | | Part of #2559
* | maint: Run maint/add_warning to deny string slicesClara Engler2026-06-091-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | This commit executes maint/add_warning with the just added change to deny string slices except in tests. I recommend auditing this by checking out the previous commit followed by running the script yourself and then verifying that the diff is identical to this commit. This commit makes cargo clippy fail. We will add exceptions in the next commit.
* | maint: Deny/Allow clippy::string_sliceClara Engler2026-06-091-0/+2
|/ | | | | | | This commit denies clippy::string_slice but allows it for tests in maint/add_warning. The script will be executed in the next commit.
* maint/cargo-audit: Ignore RUSTSEC-2026-0173Gabriela Moldovan2026-06-081-0/+7
| | | | | `proc-macro-error2` is unmaintained. We depend on it via `getset` and `dynasm`, so we'll this exception until they're updated.
* fix coverage_fuzz_corpora to use the target-coverage dir52252252026-06-041-3/+5
|
* Bump all the unstable tor- and arti- crates to 0.43.0Gabriela Moldovan2026-06-012-6/+6
| | | | | | | | | | Done using: ``` for crate in $(./maint/list-crates | rg '^(tor|arti-)'); do cargo set-version -p $crate 0.43.0 done ```
* Upgrade rand crates to 0.10.Wesley Aptekar-Cassels2026-05-121-2/+1
| | | | | | | | | | | When the circ-padding feature is enabled, we use maybenot, which does not yet support rand 0.10. In the meantime, enabling this feature pulls in rand 0.9. This is not ideal, but should be okay as a temporary situation. This also replaces the use of ReseedingRng (which was removed in 0.10) with the reseeding_rng crate. This is somewhat less performant, but it should be okay.
* Update to Rust 1.95.0 for build-repro CI job.Wesley Aptekar-Cassels2026-05-071-1/+1
|
* maint: Add exception to check-licenses.Wesley Aptekar-Cassels2026-05-071-0/+1
|
* release: Bump tor- and arti- crate versions.Wesley Aptekar-Cassels2026-05-062-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cargo set-version -p arti-client 0.42.0 cargo set-version -p arti-config 0.42.0 cargo set-version -p arti-relay 0.42.0 cargo set-version -p arti-rpc-client-core 0.42.0 cargo set-version -p arti-rpcserver 0.42.0 cargo set-version -p arti-testing 0.42.0 cargo set-version -p arti-ureq 0.42.0 cargo set-version -p tor-async-utils 0.42.0 cargo set-version -p tor-basic-utils 0.42.0 cargo set-version -p tor-bytes 0.42.0 cargo set-version -p tor-cell 0.42.0 cargo set-version -p tor-cert 0.42.0 cargo set-version -p tor-cert-x509 0.42.0 cargo set-version -p tor-chanmgr 0.42.0 cargo set-version -p tor-checkable 0.42.0 cargo set-version -p tor-circmgr 0.42.0 cargo set-version -p tor-config 0.42.0 cargo set-version -p tor-config-path 0.42.0 cargo set-version -p tor-consdiff 0.42.0 cargo set-version -p tor-dirclient 0.42.0 cargo set-version -p tor-dircommon 0.42.0 cargo set-version -p tor-dirmgr 0.42.0 cargo set-version -p tor-dirserver 0.42.0 cargo set-version -p tor-error 0.42.0 cargo set-version -p tor-events 0.42.0 cargo set-version -p tor-general-addr 0.42.0 cargo set-version -p tor-geoip 0.42.0 cargo set-version -p tor-guardmgr 0.42.0 cargo set-version -p tor-hsclient 0.42.0 cargo set-version -p tor-hscrypto 0.42.0 cargo set-version -p tor-hsrproxy 0.42.0 cargo set-version -p tor-hsservice 0.42.0 cargo set-version -p tor-key-forge 0.42.0 cargo set-version -p tor-keymgr 0.42.0 cargo set-version -p tor-linkspec 0.42.0 cargo set-version -p tor-llcrypto 0.42.0 cargo set-version -p tor-log-ratelim 0.42.0 cargo set-version -p tor-memquota 0.42.0 cargo set-version -p tor-memquota-cost 0.42.0 cargo set-version -p tor-netdir 0.42.0 cargo set-version -p tor-netdoc 0.42.0 cargo set-version -p tor-persist 0.42.0 cargo set-version -p tor-proto 0.42.0 cargo set-version -p tor-protover 0.42.0 cargo set-version -p tor-ptmgr 0.42.0 cargo set-version -p tor-relay-crypto 0.42.0 cargo set-version -p tor-relay-selection 0.42.0 cargo set-version -p tor-rpcbase 0.42.0 cargo set-version -p tor-rpc-connect 0.42.0 cargo set-version -p tor-rtcompat 0.42.0 cargo set-version -p tor-rtmock 0.42.0 cargo set-version -p tor-socksproto 0.42.0 cargo set-version -p tor-units 0.42.0
* Merge branch 'osx_document_upgrade' into 'main'Ian Jackson2026-04-291-3/+13
|\ | | | | | | | | | | | | reproducible-build: Document how to upgrade the OSX SDK version Closes #2444 See merge request tpo/core/arti!3921
| * reproducible-build: Document how to upgrade the OSX SDK versionNick Mathewson2026-04-261-3/+13
| | | | | | | | Closes #2444.
* | dependencies-bodge: remove bodge for security-frameworkNick Mathewson2026-04-281-2/+5
|/ | | | | | | Now that we've updated to MACOS_DEPLOYMENT_TARGET 10.15 (see !3920) we can use more recent versions of the security-framework crate. Closes #2387.
* Remove now-false comment in reproducible-build.Nick Mathewson2026-04-261-1/+0
|
* Update MACOS_DEPLOYMENT_TARGET to 10.14Nick Mathewson2026-04-251-1/+1
| | | | | | | | | | | | | This gives our reproducible-build tools permission to use APIs introduced in versions up to 10.14. Previously, we had this set to 10.12, which is the oldest version supported by Rust. Upgrading to 10.14 will allow us to merge !3817, and to upgrade security-framework to the latest version (#2387). OSX 10.14 ("Mojave") was released in September 2018, and hasn't been officially supported since October 2021. IMO it's a fine "very old version" for now.
* reproducible-build: version the osxcross directory.Nick Mathewson2026-04-181-7/+7
| | | | | | This patch puts the osx tools build (which gets cached) into a directory that includes the SDK version, so that we don't get confused with older or newer SDK builds.
* Update the OSX SDK in our reproducible build.Nick Mathewson2026-04-171-15/+54
| | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: - Update the build target to 10.12, and define it in a single place. (We had 10.7 before, but Rust only supports 10.12 and higher. We will probably want to update this to something even more recent soon. - Use the default clang c++ library, rather than trying to force libstdc++, which OSX dropped after the 10.13 SDK. - Use the same clang++ for compilation and linking. - Use the 15.5 SDK. - Use a copy of the SDK with a known source. Specifically we start with the the pkg file from Apple, as cached by the TBB team on `build-sources.tbb.tpo`. Using a pkg file means that we have to run a script from them the tor-browser-build repository to extract the SDK files, and then run the osxcross script that repackages that SDK as a tar.xz file. I believe our script will make sure this gets cached. - Stop trying to use define an `ar`; nothing needs it.
* docker-reproducible-build: Fix script name.Nick Mathewson2026-04-171-1/+1
|
* Ignore RUSTSEC-2026-0097, for the benefit of rand 0.8.x.Ian Jackson2026-04-131-0/+7
|
* Merge branch 'rustls-defaults' into 'main'Nick Mathewson2026-04-081-7/+1
|\ | | | | | | | | | | | | Allow compile-time selection of rustls CryptoProvider; use aws-lc-rs by default. Closes #2448 See merge request tpo/core/arti!3857
| * check-licenses: Remove aws-lc-rs exception.Nick Mathewson2026-04-081-7/+1
| | | | | | | | | | They have finally updated their license to remove the old OpenSSL/4-clause BSD text. (See https://github.com/aws/aws-lc/pull/3091 .)
* | Merge branch 'update-rust' into 'main'Ian Jackson2026-04-021-1/+1
|\ \ | | | | | | | | | | | | Update CI images for Rust and Alpine See merge request tpo/core/arti!3839
| * | CI: Update Rust to 1.94.1Ian Jackson2026-04-021-1/+1
| | |
| * | CI: Also update Rust Alpine image in docker-reproducible-buildIan Jackson2026-04-021-1/+1
| | |
* | | maint: `set -o xtrace` to `set -x`Clara Engler2026-04-022-4/+2
| | |
* | | maint: Use xtrace instead of echo in hooksClara Engler2026-04-012-12/+2
| |/ |/| | | | | | | | | This commit replaces our own calls of echo by simply adding `set -o xtrace` to the top of the shell scripts, which achieves exactly the same but in a native way.
* | maint/dependencies-bodge: Be more explicit that there should be no codeIan Jackson2026-03-311-1/+1
| |
* | Use maint/dependencies-bodge to work around security-framework FTBFSIan Jackson2026-03-311-0/+2
| | | | | | | | | | Works around #2387. Empirically, with this, cargo update no longer wants to update this crate to the broken version.
* | Introduce maint/dependencies-bodge crateIan Jackson2026-03-312-0/+20
| |
* | Merge branch 'audit' into 'main'Ian Jackson2026-03-311-4/+22
|\ \ | | | | | | | | | | | | cargo audit exception list review See merge request tpo/core/arti!3841
| * | cargo-audit: Add TODO DIRAUTH for Marvin attackIan Jackson2026-03-311-4/+12
| | |
| * | cargo-audit: Add blank lines to make it more readable.Ian Jackson2026-03-311-0/+10
| |/
* | maint/cargo-sort: Say that you must use the right versionIan Jackson2026-03-311-0/+3
| |
* | maint/cargo-sort: InstructionsIan Jackson2026-03-311-0/+5
| |
* | maint/cargo-sort: Honour CARGO env varIan Jackson2026-03-311-1/+1
|/
* Bump versions: tor-* and arti-* unstable cratesIan Jackson2026-03-302-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As per https://gitlab.torproject.org/tpo/core/arti/-/issues/2436#note_3384773 Made with nailing-cargo -Eu set-version -p arti-client 0.41.0 nailing-cargo -Eu set-version -p arti-relay 0.41.0 nailing-cargo -Eu set-version -p arti-rpcserver 0.41.0 nailing-cargo -Eu set-version -p arti-ureq 0.41.0 nailing-cargo -Eu set-version -p arti-rpc-client-core 0.41.0 nailing-cargo -Eu set-version -p tor-basic-utils 0.41.0 nailing-cargo -Eu set-version -p tor-error 0.41.0 nailing-cargo -Eu set-version -p tor-general-addr 0.41.0 nailing-cargo -Eu set-version -p tor-geoip 0.41.0 nailing-cargo -Eu set-version -p tor-memquota-cost 0.41.0 nailing-cargo -Eu set-version -p tor-llcrypto 0.41.0 nailing-cargo -Eu set-version -p tor-cert-x509 0.41.0 nailing-cargo -Eu set-version -p tor-rtcompat 0.41.0 nailing-cargo -Eu set-version -p tor-rtmock 0.41.0 nailing-cargo -Eu set-version -p tor-async-utils 0.41.0 nailing-cargo -Eu set-version -p tor-config 0.41.0 nailing-cargo -Eu set-version -p tor-config-path 0.41.0 nailing-cargo -Eu set-version -p tor-rpc-connect 0.41.0 nailing-cargo -Eu set-version -p tor-log-ratelim 0.41.0 nailing-cargo -Eu set-version -p tor-rpcbase 0.41.0 nailing-cargo -Eu set-version -p tor-memquota 0.41.0 nailing-cargo -Eu set-version -p tor-units 0.41.0 nailing-cargo -Eu set-version -p tor-bytes 0.41.0 nailing-cargo -Eu set-version -p tor-protover 0.41.0 nailing-cargo -Eu set-version -p tor-checkable 0.41.0 nailing-cargo -Eu set-version -p tor-cert 0.41.0 nailing-cargo -Eu set-version -p tor-key-forge 0.41.0 nailing-cargo -Eu set-version -p tor-hscrypto 0.41.0 nailing-cargo -Eu set-version -p tor-socksproto 0.41.0 nailing-cargo -Eu set-version -p tor-linkspec 0.41.0 nailing-cargo -Eu set-version -p tor-cell 0.41.0 nailing-cargo -Eu set-version -p tor-persist 0.41.0 nailing-cargo -Eu set-version -p tor-keymgr 0.41.0 nailing-cargo -Eu set-version -p tor-relay-crypto 0.41.0 nailing-cargo -Eu set-version -p tor-proto 0.41.0 nailing-cargo -Eu set-version -p tor-netdoc 0.41.0 nailing-cargo -Eu set-version -p tor-consdiff 0.41.0 nailing-cargo -Eu set-version -p tor-netdir 0.41.0 nailing-cargo -Eu set-version -p tor-relay-selection 0.41.0 nailing-cargo -Eu set-version -p tor-chanmgr 0.41.0 nailing-cargo -Eu set-version -p tor-ptmgr 0.41.0 nailing-cargo -Eu set-version -p tor-dircommon 0.41.0 nailing-cargo -Eu set-version -p tor-guardmgr 0.41.0 nailing-cargo -Eu set-version -p tor-circmgr 0.41.0 nailing-cargo -Eu set-version -p tor-dirclient 0.41.0 nailing-cargo -Eu set-version -p tor-dirmgr 0.41.0 nailing-cargo -Eu set-version -p tor-dirserver 0.41.0 nailing-cargo -Eu set-version -p tor-hsclient 0.41.0 nailing-cargo -Eu set-version -p tor-hsservice 0.41.0 nailing-cargo -Eu set-version -p tor-hsrproxy 0.41.0
* Run cargo sort --workspace and commit the parts we wantIan Jackson2026-03-301-1/+2
|
* Add missing full feature to maint/keygen-client-auth-testIan Jackson2026-03-301-0/+7
| | | | As generated by maint/fixup-features.
* Fix typosTobias Stoeckmann2026-03-242-4/+4
| | | | Typos found with codespell
* keymgr, key-forge: Use our ssh-* forksGabriela Moldovan2026-03-161-1/+1
| | | | | | | | | | | | | | | | Upstream `ssh-key` is missing some important features we need for arti-relay: * a bug fix without which we can't convert deserialized RSA keys to their rsa counterparts: https://github.com/RustCrypto/SSH/pull/318 * @wesleyac 's patch https://github.com/RustCrypto/SSH/pull/412 for allowing insecure (1024 bits long) RSA keys (needed because the relay KS_relayid_rsa identity keys are 1024 bits long) We plan to switch back to mainline `ssh-key` when `ssh-key 0.7.0` comes out. See the discussion in #2398 for more details.
* Fix word duplicate typosTobias Stoeckmann2026-03-151-1/+1
|
* chutney scripts: opt into strict typecheckingJim Newsome2026-03-091-0/+6
|
* Bump toml_edit to 0.25.3Gabriela Moldovan2026-03-041-1/+1
|
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-26 17:18:08 +0000