fix(picky): pin leftover pre-release crypto crates (#430)

The patch version upgrade is not allowed to bring breaking changes, but
this rule doesn't work for an `rc` version. So we should pin the `rc`
versions, to not allow _cargo_ update to a new `rc` automatically.

Author: RRRadicalEdward

Cargo.lock

@@ -20,7 +20,7 @@ picky-asn1 = { path = "../picky-asn1", default-features = false }
 picky-asn1-der = { path = "../picky-asn1-der" }
 picky-asn1-x509 = { path = "../picky-asn1-x509", features = ["legacy", "zeroize"] }
 
-argon2 = "0.6.0-rc.1"
+argon2 = "=0.6.0-rc.1"
 rand = "0.9"
 
 # FFI
@@ -34,3 +34,11 @@ serde_json = "1"
 # WASM support
 [target.'cfg(target_arch = "wasm32")'.dependencies]
 getrandom = { version = "0.3", features = ["wasm_js"] }
+
+# Pin transitive dependencies versions.
+# TODO: Remove when stable versions will be released.
+blake2 = "=0.11.0-rc.2"
+digest = "=0.11.0-rc.3"
+crypto-common = "=0.2.0-rc.4"
+block-buffer = "=0.11.0-rc.5"
+password-hash = "=0.6.0-rc.1"

ffi/Cargo.toml

@@ -105,6 +105,10 @@ pkcs1 = "=0.8.0-rc.4"
 keccak = "=0.2.0-rc.0"
 primefield = "=0.14.0-pre.6"
 primeorder = "=0.14.0-pre.9"
+ff = { version = "=0.14.0-pre.0", default-features = false }
+group = "=0.14.0-pre.0"
+curve25519-dalek = "=5.0.0-pre.1"
+crypto-primes = "=0.7.0-pre.3"
 
 [dev-dependencies]
 pretty_assertions = "1.4"