fix(contracts): force ed25519-dalek 2.1.1 via cargo patch and CI lockfile pin

Workspace deps alone still let soroban-env-host compile against ed25519-dalek 3.0. Patch crates.io to the 2.1.1 git tag and generate a pinned lockfile in CI before builds.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: Divine-mercyx

.github/workflows/ci.yml

@@ -58,6 +58,11 @@ jobs:
         with:
           workspaces: contracts
 
+      - name: Pin ed25519-dalek lockfile
+        run: |
+          cargo generate-lockfile
+          cargo update -p ed25519-dalek --precise 2.1.1
+
       - name: cargo fmt
         run: cargo fmt --all -- --check
 

contracts/Cargo.toml

@@ -26,6 +26,12 @@ soroban-sdk = { version = "22.0.0", features = ["alloc"] }
 # Pin 2.x so CI stays on the API soroban-env-host 22.1.3 was written for.
 ed25519-dalek = { version = "=2.1.1", features = ["rand_core"] }
 
+# Force every crates.io ed25519-dalek resolution (including soroban-env-host's
+# loose `>=2.0.0`) onto 2.1.1. Without this, Cargo can still compile
+# soroban-env-host against ed25519-dalek 3.0 while other crates use 2.x.
+[patch.crates-io]
+ed25519-dalek = { git = "https://github.com/dalek-cryptography/curve25519-dalek", tag = "ed25519-2.1.1", features = ["rand_core"] }
+
 [profile.release]
 opt-level = "z"
 overflow-checks = true

contracts/batch-wallet/Cargo.toml

@@ -9,8 +9,5 @@ crate-type = ["cdylib", "rlib"]
 [dependencies]
 soroban-sdk.workspace = true
 
-[target.'cfg(not(target_family = "wasm"))'.dependencies]
-ed25519-dalek.workspace = true
-
 [dev-dependencies]
 soroban-sdk = { workspace = true, features = ["testutils"] }

contracts/gist-registry/Cargo.toml

@@ -9,8 +9,5 @@ crate-type = ["cdylib", "rlib"]
 [dependencies]
 soroban-sdk.workspace = true
 
-[target.'cfg(not(target_family = "wasm"))'.dependencies]
-ed25519-dalek.workspace = true
-
 [dev-dependencies]
 soroban-sdk = { workspace = true, features = ["testutils"] }

contracts/governance/Cargo.toml

@@ -9,8 +9,5 @@ crate-type = ["cdylib", "rlib"]
 [dependencies]
 soroban-sdk.workspace = true
 
-[target.'cfg(not(target_family = "wasm"))'.dependencies]
-ed25519-dalek.workspace = true
-
 [dev-dependencies]
 soroban-sdk = { workspace = true, features = ["testutils"] }

contracts/multisig/Cargo.toml

@@ -9,8 +9,5 @@ crate-type = ["cdylib", "rlib"]
 [dependencies]
 soroban-sdk.workspace = true
 
-[target.'cfg(not(target_family = "wasm"))'.dependencies]
-ed25519-dalek.workspace = true
-
 [dev-dependencies]
 soroban-sdk = { workspace = true, features = ["testutils"] }