update getrandom

[oligamiq]

please update getrandom.

The version of getrandom has been updated. Until now, if you want to compile for wasm,

getrandom = { version = "0.2", features = ["std", "js"] }

getrandom = { version = "0.3.1", features = ["std", "wasm_js"] }

I had written code like this, but it causes problems because the version of getrandom on which this library depends is out of date.

Related issues, etc.
#2218
#2130
#2187

https://rust-random.github.io/book/update-0.9.html
https://github.com/rust-random/rand/blob/master/CHANGELOG.md

[briansmith]

It will be a while before I can review the changes between the last time I looked at getrandom and the getrandom 0.3 release. Don't hold your breath.

[oligamiq]

https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md

The changes that may be relevant are
・Rename getrandom and getrandom_uninit functions to fill and fill_uninit respectively
・js features to wasm_js

[oligamiq]

#2342

[briansmith]

Thanks. AFAICT getrandom 0.3 changes the way configuration is done in a way that is difficult for ring to adjust to, or at least I am not sure how to adjust ring to use the new configuration mechanism.

Plus, I review every commit in getrandom before I upgrade to a new version. At one point last year I was reviewing getrandom commits in real time, but I haven't reviewed them for a while. So I have about a year of getrandom commits to review 1-by-1 before I can do the update.

[oligamiq]

Is it for security?
Good luck!

[briansmith]

My current perspective is that it is annoying to others to be depending on getrandom 0.2 when getrandom 0.3 is available, so it is worth somebody trying to resolve things. I don't want to break backward compatibility with 0.17 in the next few months, so such a change would need to be backward compatible. I am open to hearing creative solutions.

[oligamiq]

How about switching using features?

In Cargo.toml, you can write it like this:

_getrandom_alias_3 = { version = "0.3.1", package = "getrandom", features = [
    "std",
    "wasm_js",
] }
_getrandom_alias_2 = { version = "0.2", package = "getrandom", features = [
    "std",
    "js",
] }

This allows you to include multiple versions as dependencies.
Ideally, you should update the library version instead, so this is not the best approach.