Skip to content

build(deps): advance RustCrypto pins to the current rc.18/rc.33/rc.10 cluster#692

Merged
Benoît Cortier (CBenoit) merged 1 commit into
Devolutions:masterfrom
sopleb:align-rustcrypto-pins
Jun 23, 2026
Merged

build(deps): advance RustCrypto pins to the current rc.18/rc.33/rc.10 cluster#692
Benoît Cortier (CBenoit) merged 1 commit into
Devolutions:masterfrom
sopleb:align-rustcrypto-pins

Conversation

@sopleb

@sopleb Sopleb (sopleb) commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

The exact-pinned RustCrypto release candidates in sspi and dpapi lag the versions published and shared across the ecosystem, so they stop resolving next to crates that already moved (russh 0.61 pulls ecdsa 0.17.0-rc.18, elliptic-curve 0.14.0-rc.33, the p-curves at rc.10, rsa 0.10.0-rc.18, and the dalek rc.0 line). This advances the pins to that cluster.

Cargo.toml and crates/dpapi/Cargo.toml:

crate from to
ecdsa (dpapi) 0.17.0-rc.17 0.17.0-rc.18
elliptic-curve (dpapi) 0.14.0-rc.31 0.14.0-rc.33
p256 / p384 / p521 0.14.0-rc.9 0.14.0-rc.10
primeorder 0.14.0-rc.9 0.14.0-rc.10
primefield 0.14.0-rc.9 0.14.0-rc.12
rsa 0.10.0-rc.17 0.10.0-rc.18
ed25519-dalek 3.0.0-pre.6 3.0.0-rc.0
x25519-dalek (dpapi) 3.0.0-pre.6 3.0.0-rc.0
curve25519-dalek 5.0.0-pre.6 5.0.0-rc.0

ed25519, signature, pkcs8, ff, group, aead, pbkdf2, and rfc6979 have stable releases, so their pins drop the RC suffix and follow the stable line.

The bump needs no source changes. cargo build -p sspi --features scard, cargo test -p sspi --features scard, and the full workspace build pass on a 1.96 toolchain.

Update: picky 7.0.0-rc.24 shipped on 2026-06-23 with the matching bump (companion PR Devolutions/picky-rs#501), so the earlier ordering caveat is gone. This bumps the picky pin from rc.23 to rc.24 and regenerates Cargo.lock; the workspace now resolves from crates.io with no local picky patch. The validation above was rerun against rc.24.

@CBenoit Benoît Cortier (CBenoit) left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey, thank you! A new version of the picky crate was released, I think we can update this PR 🙂

Bump the exact-pinned RustCrypto release candidates in the sspi and
dpapi manifests so they resolve alongside crates that have already moved
to the newer cluster (e.g. russh 0.61):

  ecdsa            0.17.0-rc.17 -> 0.17.0-rc.18   (dpapi)
  elliptic-curve   0.14.0-rc.31 -> 0.14.0-rc.33   (dpapi)
  p256/p384/p521   0.14.0-rc.9  -> 0.14.0-rc.10
  primeorder       0.14.0-rc.9  -> 0.14.0-rc.10
  primefield       0.14.0-rc.9  -> 0.14.0-rc.12
  rsa              0.10.0-rc.17 -> 0.10.0-rc.18
  ed25519-dalek    3.0.0-pre.6  -> 3.0.0-rc.0
  x25519-dalek     3.0.0-pre.6  -> 3.0.0-rc.0     (dpapi)
  curve25519-dalek 5.0.0-pre.6  -> 5.0.0-rc.0

Crates that have shipped stable releases drop the RC pin and track the
stable line: ed25519, signature, pkcs8, ff, group, aead, pbkdf2, rfc6979.

picky 7.0.0-rc.24 carries the same cluster (picky-rs#501), so bump the
picky pin from rc.23 to rc.24 and regenerate Cargo.lock. The workspace
now resolves from crates.io without a local patch. No source changes are
required; sspi (with scard) and the full workspace build and tests pass.
@sopleb Sopleb (sopleb) force-pushed the align-rustcrypto-pins branch from d39752b to 3a0039d Compare June 23, 2026 18:09
@sopleb

Copy link
Copy Markdown
Contributor Author

Hey, thank you! A new version of the picky crate was released, I think we can update this PR 🙂

should be good to go now.

@CBenoit Benoît Cortier (CBenoit) left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you very much!

@CBenoit Benoît Cortier (CBenoit) changed the title Advance RustCrypto pins to the current rc.18/rc.33/rc.10 cluster build(deps): advance RustCrypto pins to the current rc.18/rc.33/rc.10 cluster Jun 23, 2026
@CBenoit Benoît Cortier (CBenoit) enabled auto-merge (squash) June 23, 2026 18:15
@CBenoit Benoît Cortier (CBenoit) merged commit 095e3f3 into Devolutions:master Jun 23, 2026
61 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants