Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cargo.lock: bump dependencies #628

Closed
wants to merge 1 commit into from
Closed

Cargo.lock: bump dependencies #628

wants to merge 1 commit into from

Conversation

tarcieri
Copy link
Member

Updates the following dependencies:

$ cargo update
Updating crates.io index
 Locking 14 packages to latest compatible versions
Updating block-buffer v0.11.0-rc.0 -> v0.11.0-rc.3
  Adding byteorder v1.5.0
Updating const-oid v0.10.0-rc.0 -> v0.10.0-rc.3
Updating crypto-common v0.2.0-rc.0 -> v0.2.0-rc.1
Updating hybrid-array v0.2.0-rc.8 -> v0.2.1
Updating libc v0.2.155 -> v0.2.162
Updating ppv-lite86 v0.2.17 -> v0.2.20
  Adding proc-macro2 v1.0.89
  Adding quote v1.0.37
Updating subtle v2.6.0 -> v2.6.1
  Adding syn v2.0.87
  Adding unicode-ident v1.0.13
  Adding zerocopy v0.7.35 (latest: v0.8.9)
  Adding zerocopy-derive v0.7.35 (latest: v0.8.9)

It seems ppv-lite86 now pulls in quite a few more dependencies, including zerocopy and its custom derive support along with the whole proc macro stack.

Updates the following dependencies:

    $ cargo update
    Updating crates.io index
     Locking 14 packages to latest compatible versions
    Updating block-buffer v0.11.0-rc.0 -> v0.11.0-rc.3
      Adding byteorder v1.5.0
    Updating const-oid v0.10.0-rc.0 -> v0.10.0-rc.3
    Updating crypto-common v0.2.0-rc.0 -> v0.2.0-rc.1
    Updating hybrid-array v0.2.0-rc.8 -> v0.2.1
    Updating libc v0.2.155 -> v0.2.162
    Updating ppv-lite86 v0.2.17 -> v0.2.20
      Adding proc-macro2 v1.0.89
      Adding quote v1.0.37
    Updating subtle v2.6.0 -> v2.6.1
      Adding syn v2.0.87
      Adding unicode-ident v1.0.13
      Adding zerocopy v0.7.35 (latest: v0.8.9)
      Adding zerocopy-derive v0.7.35 (latest: v0.8.9)

It seems `ppv-lite86` now pulls in quite a few more dependencies,
including `zerocopy` and its custom derive support along with the whole
proc macro stack.
@tarcieri
Copy link
Member Author

Note: this should clear the recent security audit failure, which was due to a yanked subtle release: https://github.com/RustCrypto/hashes/actions/runs/11799719431/job/32868904042

@tarcieri
Copy link
Member Author

Aah fun, this repo hasn't been bumped to a 1.81 MSRV yet

@newpavlov
Copy link
Member

Done in #631.

@newpavlov newpavlov closed this Nov 22, 2024
@newpavlov newpavlov deleted the bump-deps branch November 22, 2024 07:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants