chore(deps): update rust-non-major #2070
No reviewers
Labels
No labels
Abandoned
Blocked
Bug
Changelog
Added
Changelog
Missing
Changelog
None
Cherry-picking
Database
Dependencies
Dependencies/Renovate
Difficulty
Easy
Difficulty
Hard
Difficulty
Medium
Documentation
Enhancement
Good first issue
Help wanted
Inherited
Matrix/Administration
Matrix/Appservices
Matrix/Auth
Matrix/Client
Matrix/Core
Matrix/E2EE
Matrix/Federation
Matrix/Hydra
Matrix/MSC
Matrix/Media
Matrix/T&S
Merge
Merge/Manual
Merge/Squash
Meta
Meta/CI
Meta/Packaging
Priority
Blocking
Priority
High
Priority
Low
Security
Status
Confirmed
Status
Duplicate
Status
Invalid
Status
Needs Investigation
Support
bob the builder
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
continuwuation/continuwuity!2070
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/rust-non-major"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
1.17.3→1.18.02.4.2→2.7.04.6.4→4.6.61.0.11→1.0.121.4.2→1.5.01.1.3+spec-1.1.0→1.1.4Release Notes
aws/aws-lc-rs (aws-lc-rs)
v1.18.0: aws-lc-rs v1.18.0Compare Source
AWS-LC-FIPS module updated to 4.x
This release switches
aws-lc-fips-sys(used via thefipsfeature) from the AWS-LC-FIPS 3.x branch to AWS-LC-FIPS 4.0.aws-lc-rsto<1.18.0. See the Cargo Book on Specifying Dependencies.What's Changed
aws-lc-fips-systo AWS-LC's "FIPS 4.0" branch by @justsmth in #1185aws-lc-fips-sysv0.13.16 -> v0.14.0. Please see the call-out above.PqdsaKeyPair,PqdsaPublicKey,PqdsaPrivateKey,PqdsaSigningAlgorithm,PqdsaVerificationAlgorithm, and theML_DSA_44/ML_DSA_65/ML_DSA_87algorithms (and their_SIGNINGcounterparts) now live inaws_lc_rs::signature. ML-DSA no longer requires theunstablefeature, and is now available underfips-- the FIPS 4.0 module provides ML-DSA, which is what had kept these APIs unstable. See our updated API documentation.aws_lc_rs::unstable::signaturetoaws_lc_rs::signature. Theunstable::signaturemodule remains as deprecated aliases and will be removed in a future release.PqdsaKeyPair::to_pkcs8has been renamed toto_pkcs8v1, since elsewhere in the module an unqualifiedto_pkcs8means PKCS#8 v2. A deprecatedto_pkcs8alias remains available under theunstablefeature.unstableconsumers continue to compile, with deprecation warnings. Two cases need a source change: builds using#![deny(warnings)], and code that glob-imports bothsignature::*andunstable::signature::*, which now needs an explicit import to disambiguate.PqdsaVerificationAlgorithm::parsed_verify_digest_signow always returnsUnspecified. Digest-then-verify is not an operation defined by FIPS 204 -- pure ML-DSA signs the message itself, and the pre-hash variant (HashML-DSA) uses a distinct domain separator that this API does not implement.seal_separate_out_of_placetoLessSafeKeyandTlsRecordSealingKey. Every sealing entry point was previously in-place, so a caller whose plaintext was borrowed or shared had to copy it into a scratch buffer purely to make it mutable. This mirrors the existingopen_separate_gather, so the sealing and opening directions now match.rsa::KeyPair::from_componentsfor constructing RSA key pairs from raw components by @justsmth in #1175rsa::KeyPairComponentsandrsa::KeyPair::from_components, matching ring 0.17, so a signing key can be built from formats such as JWK without first encoding the components as DER. Unlike ring,dand the CRT parameters are validated at construction usingRSA_check_key, so keys with inconsistent or placeholder values that ring accepts may be rejected. Unnecessary generic bounds were also removed fromPublicKeyComponents.OPENSSL_SMALL, and no AVX-512 assembly on x86_64) whenever Cargo is already building for size. In CI, a small binary exercising SHA-256, AES-256-GCM, and ECDSA P-256 is 36-50% smaller atopt-level=zthan atopt-level=3: 50% on x86_64 Linux, 48% on aarch64 macOS, 39% on x86_64 Windows, 36% on aarch64 Linux. Your own savings depend on how much of AWS-LC your binary retains.AWS_LC_SYS_SMALL=1/=0to force it on or off independently of opt-level.aws-lc-fips-sysrequires an explicitAWS_LC_FIPS_SYS_SMALL=1, and warns when it is set.opt-level=3footprint is unchanged.DEP_AWS_LC_*/DEP_AWS_LC_FIPS_*(libdir,libcrypto_path,link_kind, andlibssl_pathwithssl), consistently across the CC, CMake, and system-library build paths. Existing linker directives are unchanged. On Windows, the*_pathvalues are the link-time artifact (import library), not the runtime DLL.KeyEncryptionKey::unwrapno longer underflows on ciphertexts shorter than 8 bytes. Since the ciphertext is untrusted input, builds withoverflow-checks = truewould panic instead of returning the documentedErr(Unspecified); default release builds were unaffected.KeyEncryptionKeynow zeroizes its key material on drop, consistent with the other key types in this crate.Upstream AWS-LC (v5.5.0)
aws-lc-sysv0.44.0 aligns with AWS-LC v5.5.0 (previously v5.2.0). See also the release notes for v5.3.0 and v5.4.0.Build Improvements
OUT_DIRnow remove any stale destination first and leave the fresh copy writable, so building against a read-only prebuilt install (e.g. the Nix store) no longer fails withPermission deniedon a build-script rerun. AnOUT_DIRalready poisoned by an earlier build now recovers without acargo clean.Issues Being Closed
Other Merged PRs
New Contributors
Full Changelog: https://github.com/aws/aws-lc-rs/compare/v1.17.3...v1.18.0
bytesize-rs/bytesize (bytesize)
v2.7.0Compare Source
ByteSize::display()when default features were disabled.v2.6.0Compare Source
v2.5.0Compare Source
#[no_alloc]support.clap-rs/clap (clap)
v4.6.6Compare Source
Features
Command::get_overridden_usagev4.6.5Compare Source
Fixes
value_namesare optional withnum_argsmmastrac/linktime (ctor)
v1.0.12Compare Source
What's Changed
Full Changelog: https://github.com/mmastrac/linktime/compare/ctor-1.0.11...ctor-1.0.12
hyperium/http (http)
v1.5.0Compare Source
Method::QUERYconstant for the new QUERY method defined in RFC 10008.uri::Builder::path_and_query()to allow empty strings to mean no path.uri::PathAndQueryparsing to enforce URI max length.toml-rs/toml (toml)
v1.1.4Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.
647e1dbe35032e1997dfchore(deps): update rust crate toml to v1.1.4to chore(deps): update rust-non-major032e1997df732a48485e732a48485ef56e6effa2f56e6effa2284cffd9b9284cffd9b9abe35eee27abe35eee27c2ac77ada4c2ac77ada4a959594458a959594458e88d9273d7