Skip to content

Advance RustCrypto pins to the current rc.18/rc.33/rc.10 cluster#692

Open
Sopleb (sopleb) wants to merge 1 commit into
Devolutions:masterfrom
sopleb:align-rustcrypto-pins
Open

Advance RustCrypto pins to the current rc.18/rc.33/rc.10 cluster#692
Sopleb (sopleb) wants to merge 1 commit into
Devolutions:masterfrom
sopleb:align-rustcrypto-pins

Conversation

@sopleb

Copy link
Copy Markdown

The exact-pinned RustCrypto release candidates in sspi and dpapi lag the versions published and shared across the ecosystem, so they stop resolving next to crates that already moved (russh 0.61 pulls ecdsa 0.17.0-rc.18, elliptic-curve 0.14.0-rc.33, the p-curves at rc.10, rsa 0.10.0-rc.18, and the dalek rc.0 line). This advances the pins to that cluster.

Cargo.toml and crates/dpapi/Cargo.toml:

crate from to
ecdsa (dpapi) 0.17.0-rc.17 0.17.0-rc.18
elliptic-curve (dpapi) 0.14.0-rc.31 0.14.0-rc.33
p256 / p384 / p521 0.14.0-rc.9 0.14.0-rc.10
primeorder 0.14.0-rc.9 0.14.0-rc.10
primefield 0.14.0-rc.9 0.14.0-rc.12
rsa 0.10.0-rc.17 0.10.0-rc.18
ed25519-dalek 3.0.0-pre.6 3.0.0-rc.0
x25519-dalek (dpapi) 3.0.0-pre.6 3.0.0-rc.0
curve25519-dalek 5.0.0-pre.6 5.0.0-rc.0

ed25519, signature, pkcs8, ff, group, aead, pbkdf2, and rfc6979 have stable releases, so their pins drop the RC suffix and follow the stable line.

The bump needs no source changes. cargo build -p sspi --features scard, cargo test -p sspi --features scard, and the full workspace build pass on a 1.96 toolchain.

One ordering note: sspi-ffi depends on published picky 7.0.0-rc.23, whose pins still target the older cluster. Until a picky release carries the matching bump (companion PR Devolutions/picky-rs#501), the workspace resolves from crates.io only with a local picky patch. The validation above used that patch.

Bump the exact-pinned RustCrypto release candidates in the sspi and
dpapi manifests so they resolve alongside crates that have already moved
to the newer cluster (e.g. russh 0.61):

  ecdsa            0.17.0-rc.17 -> 0.17.0-rc.18   (dpapi)
  elliptic-curve   0.14.0-rc.31 -> 0.14.0-rc.33   (dpapi)
  p256/p384/p521   0.14.0-rc.9  -> 0.14.0-rc.10
  primeorder       0.14.0-rc.9  -> 0.14.0-rc.10
  primefield       0.14.0-rc.9  -> 0.14.0-rc.12
  rsa              0.10.0-rc.17 -> 0.10.0-rc.18
  ed25519-dalek    3.0.0-pre.6  -> 3.0.0-rc.0
  x25519-dalek     3.0.0-pre.6  -> 3.0.0-rc.0     (dpapi)
  curve25519-dalek 5.0.0-pre.6  -> 5.0.0-rc.0

Crates that have shipped stable releases drop the RC pin and track the
stable line: ed25519, signature, pkcs8, ff, group, aead, pbkdf2, rfc6979.
No source changes are required; sspi (with scard) and the full workspace
build and tests pass.

Note: sspi-ffi depends on published picky 7.0.0-rc.23, whose pins still
target the older cluster, so the workspace resolves on crates.io only
once the companion picky pin bump is released.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant