Skip to content

build(deps): advance RustCrypto pins to the current rc.18/rc.33/rc.10 cluster#501

Merged
Benoît Cortier (CBenoit) merged 2 commits into
Devolutions:masterfrom
sopleb:align-rustcrypto-pins
Jun 19, 2026
Merged

build(deps): advance RustCrypto pins to the current rc.18/rc.33/rc.10 cluster#501
Benoît Cortier (CBenoit) merged 2 commits into
Devolutions:masterfrom
sopleb:align-rustcrypto-pins

Conversation

@sopleb

Copy link
Copy Markdown
Contributor

picky's exact-pinned RustCrypto release candidates lag the versions published and shared across the ecosystem, so picky stops resolving next to crates that already moved (russh 0.61 pulls ecdsa 0.17.0-rc.18, elliptic-curve 0.14.0-rc.33, the p-curves at rc.10, and the dalek rc.0 line). This advances picky's pins to that cluster.

picky/Cargo.toml:

crate from to
ecdsa 0.17.0-rc.17 0.17.0-rc.18
elliptic-curve 0.14.0-rc.32 0.14.0-rc.33
p256 / p384 / p521 0.14.0-rc.9 0.14.0-rc.10
primeorder 0.14.0-rc.9 0.14.0-rc.10
primefield 0.14.0-rc.9 0.14.0-rc.12
ed25519-dalek 3.0.0-pre.6 3.0.0-rc.0
x25519-dalek 3.0.0-pre.6 3.0.0-rc.0
curve25519-dalek 5.0.0-pre.6 5.0.0-rc.0

ff, group, and aead have stable releases, so their pins drop the pre-release suffix and follow the stable line.

The bump needs no source changes. cargo build -p picky --all-features, cargo test -p picky, and the full workspace build pass on a 1.96 toolchain.

Bump the remaining exact-pinned RustCrypto release candidates so picky
resolves alongside crates that have already moved to the newer cluster
(e.g. russh 0.61, which pulls ecdsa 0.17.0-rc.18 / elliptic-curve
0.14.0-rc.33 / p-curves 0.14.0-rc.10 / the dalek rc.0 line):

  ecdsa            0.17.0-rc.17 -> 0.17.0-rc.18
  elliptic-curve   0.14.0-rc.32 -> 0.14.0-rc.33
  p256/p384/p521   0.14.0-rc.9  -> 0.14.0-rc.10
  primeorder       0.14.0-rc.9  -> 0.14.0-rc.10
  primefield       0.14.0-rc.9  -> 0.14.0-rc.12
  ed25519-dalek    3.0.0-pre.6  -> 3.0.0-rc.0
  x25519-dalek     3.0.0-pre.6  -> 3.0.0-rc.0
  curve25519-dalek 5.0.0-pre.6  -> 5.0.0-rc.0

ff, group and aead have shipped stable releases, so their pins drop the
pre-release/RC suffix and track the stable line. No source changes are
required; the crate builds and tests pass with --all-features.
The ffi/wasm crate is a separate workspace with its own lock; refresh it
so cargo --locked (used by CI) accepts the bumped picky dependency.
@CBenoit Benoît Cortier (CBenoit) changed the title Advance RustCrypto pins to the current rc.18/rc.33/rc.10 cluster build(deps): advance RustCrypto pins to the current rc.18/rc.33/rc.10 cluster Jun 19, 2026

@CBenoit Benoît Cortier (CBenoit) left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@CBenoit Benoît Cortier (CBenoit) enabled auto-merge (squash) June 19, 2026 16:12
@CBenoit Benoît Cortier (CBenoit) merged commit 7d4b267 into Devolutions:master Jun 19, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants