Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update curve25519-dalek requirement from =4.0.0-pre.5 to =4.0.0-rc.0 #305

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 30, 2023

Updates the requirements on curve25519-dalek to permit the latest version.

Release notes

Sourced from curve25519-dalek's releases.

v4.0.0-pre.5

curve25519-dalek is a library providing group operations on the Edwards and Montgomery forms of Curve25519, and on the prime-order Ristretto group.

Breaking changes in 4.0.0

  • Update the MSRV from 1.41 to 1.56.1
  • Update backend selection to be more automatic
  • Remove std feature flag
  • Remove nightly feature flag
  • Make digest an optional feature
  • Make rand_core an optional feature
  • Replace methods Scalar::{zero, one} with constants Scalar::{ZERO, ONE}
  • Scalar::from_canonical_bytes now returns CtOption
  • Scalar::is_canonical now returns Choice
  • Deprecate EdwardsPoint::hash_from_bytes and rename it EdwardsPoint::nonspec_map_to_curve
  • Require including a new trait, use curve25519_dalek::traits::BasepointTable whenever using EdwardsBasepointTable or RistrettoBasepointTable

This release also does a lot of dependency updates and relaxations to unblock upstream build issues.

Changelog

Sourced from curve25519-dalek's changelog.

Changelog

Entries are listed in reverse chronological order per undeprecated major series.

4.x series

4.0.0

Breaking changes

  • Update the MSRV from 1.41 to 1.60
  • Make digest an optional feature
  • Make rand_core an optional feature
  • Add target u32/u64 backend overrides
  • Update backend selection to be more automatic
  • Remove std feature flag
  • Remove nightly feature flag
  • Replace methods Scalar::{zero, one} with constants Scalar::{ZERO, ONE}
  • Deprecate EdwardsPoint::hash_from_bytes and rename it EdwardsPoint::nonspec_map_to_curve
  • Require including a new trait, use curve25519_dalek::traits::BasepointTable whenever using EdwardsBasepointTable or RistrettoBasepointTable
  • Scalar::from_canonical_bytes now returns CtOption
  • Scalar::is_canonical now returns Choice

Other changes

  • Add precomputed-tables feature
  • Update Maintenance Policies for SemVer
  • Migrate documentation to docs.rs hosted
  • Fix backend documentation generation
  • Fix panic when Ristretto::double_and_compress_batch receives the identity point
  • Remove byteorder dependency
  • Update the criterion dependency to 0.4.0
  • Include README.md into crate Documentation
  • Update the rand_core dependency version and the rand dev-dependency version.
  • Relax the zeroize dependency to ^1
  • Update the edition from 2015 to 2021

3.x series

3.2.0

  • Add support for getting the identity element for the Montgomery form of curve25519, which is useful in certain protocols for checking contributory behaviour in derivation of shared secrets.

3.1.2

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [curve25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) to permit the latest version.
- [Release notes](https://github.com/dalek-cryptography/curve25519-dalek/releases)
- [Changelog](https://github.com/dalek-cryptography/curve25519-dalek/blob/main/CHANGELOG.md)
- [Commits](dalek-cryptography/curve25519-dalek@4.0.0-pre.5...4.0.0-pre.5)

---
updated-dependencies:
- dependency-name: curve25519-dalek
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 30, 2023
@daxpedda
Copy link
Contributor

Will make a PR when we merge facebook/voprf#94.

@daxpedda
Copy link
Contributor

daxpedda commented Feb 1, 2023

Replaced by #304.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 4, 2023

Looks like curve25519-dalek is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Feb 4, 2023
@dependabot dependabot bot deleted the dependabot/cargo/curve25519-dalek-eq-4.0.0-rc.0 branch February 4, 2023 00:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cla signed dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants