Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): Update p256 requirement from 0.10.0 to 0.11.0 #2636

Merged
merged 2 commits into from
Aug 23, 2022

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 10, 2022

Updates the requirements on p256 to permit the latest version.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels May 10, 2022
@mxinden
Copy link
Member

mxinden commented May 11, 2022

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch from 4372211 to 6b90879 Compare May 11, 2022 11:02
@mxinden
Copy link
Member

mxinden commented May 11, 2022

Depends on a new version of chacha20poly1305, namely v0.10.0. v0.9.0 depends on zeroize <1.5.

https://github.com/RustCrypto/AEADs/blob/e13da9c77aa754abe1a2c91b34e6b22ec1eece8b/chacha20poly1305/Cargo.toml#L25

@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch 4 times, most recently from f8fb54b to b9d03aa Compare May 18, 2022 07:54
@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch from b9d03aa to bb2f257 Compare May 20, 2022 07:10
@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch 7 times, most recently from 688124e to 468dc28 Compare June 10, 2022 16:38
@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch 4 times, most recently from 51a410d to 906a019 Compare June 21, 2022 05:06
@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch 7 times, most recently from 439296e to df567a1 Compare June 28, 2022 03:26
@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch 2 times, most recently from de1274d to 46a797a Compare July 1, 2022 14:35
@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch 3 times, most recently from cc3c704 to d95c9f5 Compare July 7, 2022 09:21
@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch 5 times, most recently from c50076e to b36528e Compare July 22, 2022 09:22
@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch from b36528e to ff06b7d Compare August 8, 2022 05:19
@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch 2 times, most recently from 38860aa to 6cee2b5 Compare August 17, 2022 05:03
@elenaf9
Copy link
Contributor

elenaf9 commented Aug 22, 2022

@dependabot rebase

@elenaf9
Copy link
Contributor

elenaf9 commented Aug 22, 2022

Depends on a new version of chacha20poly1305, namely v0.10.0. v0.9.0 depends on zeroize <1.5.

https://github.com/RustCrypto/AEADs/blob/e13da9c77aa754abe1a2c91b34e6b22ec1eece8b/chacha20poly1305/Cargo.toml#L25

@mxinden Do you more insights into what the current status is here / what we can do to fix this? Seems like this is causes errors like #2833.

@mxinden
Copy link
Member

mxinden commented Aug 23, 2022

Looks like chacha20poly1305 v0.10.0 was released some days ago, thus we can move forward here. Thanks for the ping @elenaf9.

https://crates.io/crates/chacha20poly1305/versions

Updates the requirements on [p256](https://github.com/RustCrypto/elliptic-curves) to permit the latest version.
- [Release notes](https://github.com/RustCrypto/elliptic-curves/releases)
- [Commits](https://github.com/RustCrypto/elliptic-curves/commits/p256/v0.10.1)

---
updated-dependencies:
- dependency-name: p256
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/p256-0.11.0 branch from 693ee45 to 25852ca Compare August 23, 2022 07:13
@mxinden mxinden merged commit d92cab8 into master Aug 23, 2022
@dependabot dependabot bot deleted the dependabot/cargo/p256-0.11.0 branch August 23, 2022 07:52
@mxinden
Copy link
Member

mxinden commented Aug 23, 2022

Tagged and published.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants