Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

zeroize: Allow versions newer than 1.3 for curve25519-dalek #33516

Merged
merged 1 commit into from
Oct 23, 2023
Merged

zeroize: Allow versions newer than 1.3 for curve25519-dalek #33516

merged 1 commit into from
Oct 23, 2023

Commits on Oct 21, 2023

  1. zeroize: Allow versions newer than 1.3 for curve25519-dalek

    `curve25519-dalek` v3.2.1 has a constraint on the maximum `zeroize`
    version to be no more than 1.3.
    
    At the same time, `cargo` does not want to construct a dependency graph
    with duplicate instances of a crate, when the first non-zero version of
    those instances are the same.  That is, it refuses to build a workspace
    with both 1.3 and 1.4 versions of `zeroize`.
    
    `zeroize` is actually backward compatible, and `curve25519-dalek`
    restriction is overly pessimistic.  This packages lifted this
    restriction in newer versions, but we still depend on older version and
    can not immediately update.
    ilya-bobyr committed Oct 21, 2023
    Configuration menu
    Copy the full SHA
    1357582 View commit details
    Browse the repository at this point in the history