Skip to content

Conversation

@tarcieri
Copy link
Member

Updates the following dependencies:

$ cargo update
Updating crates.io index
 Locking 14 packages to latest compatible versions
Updating block-buffer v0.11.0-rc.0 -> v0.11.0-rc.3
  Adding byteorder v1.5.0
Updating const-oid v0.10.0-rc.0 -> v0.10.0-rc.3
Updating crypto-common v0.2.0-rc.0 -> v0.2.0-rc.1
Updating hybrid-array v0.2.0-rc.8 -> v0.2.1
Updating libc v0.2.155 -> v0.2.162
Updating ppv-lite86 v0.2.17 -> v0.2.20
  Adding proc-macro2 v1.0.89
  Adding quote v1.0.37
Updating subtle v2.6.0 -> v2.6.1
  Adding syn v2.0.87
  Adding unicode-ident v1.0.13
  Adding zerocopy v0.7.35 (latest: v0.8.9)
  Adding zerocopy-derive v0.7.35 (latest: v0.8.9)

It seems ppv-lite86 now pulls in quite a few more dependencies, including zerocopy and its custom derive support along with the whole proc macro stack.

Updates the following dependencies:

    $ cargo update
    Updating crates.io index
     Locking 14 packages to latest compatible versions
    Updating block-buffer v0.11.0-rc.0 -> v0.11.0-rc.3
      Adding byteorder v1.5.0
    Updating const-oid v0.10.0-rc.0 -> v0.10.0-rc.3
    Updating crypto-common v0.2.0-rc.0 -> v0.2.0-rc.1
    Updating hybrid-array v0.2.0-rc.8 -> v0.2.1
    Updating libc v0.2.155 -> v0.2.162
    Updating ppv-lite86 v0.2.17 -> v0.2.20
      Adding proc-macro2 v1.0.89
      Adding quote v1.0.37
    Updating subtle v2.6.0 -> v2.6.1
      Adding syn v2.0.87
      Adding unicode-ident v1.0.13
      Adding zerocopy v0.7.35 (latest: v0.8.9)
      Adding zerocopy-derive v0.7.35 (latest: v0.8.9)

It seems `ppv-lite86` now pulls in quite a few more dependencies,
including `zerocopy` and its custom derive support along with the whole
proc macro stack.
@tarcieri
Copy link
Member Author

Note: this should clear the recent security audit failure, which was due to a yanked subtle release: https://github.com/RustCrypto/hashes/actions/runs/11799719431/job/32868904042

@tarcieri
Copy link
Member Author

Aah fun, this repo hasn't been bumped to a 1.81 MSRV yet

@newpavlov
Copy link
Member

Done in #631.

@newpavlov newpavlov closed this Nov 22, 2024
@newpavlov newpavlov deleted the bump-deps branch November 22, 2024 07:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants