-
Notifications
You must be signed in to change notification settings - Fork 106
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
build(deps): Upgrade to ed25519-zebra 4.0.0 #6881
Conversation
… of metrics-exporter-prometheus is 0.13.2
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is failing due to a duplicate hashbrown dependency.
The command-line for checking for duplicate dependencies is:
cargo deny check bans
We can add this to #6859 if you'd like instead.
Ah I think I updated the |
It might be nice to have a "bless" script, because it would always get the crates and versions right. The tricky part would be when it creates over-broad exceptions. I guess we could just add exceptions for each duplicate crate directly. |
oop github is being weird for me so i'll put this at the top level, @teor2345 This is interesting, I ran the command from CI which uses --all-features and it pinned on 0.13.2 and only because of ed25519-zebra and metrics-exporter-prometheus; I do see the other crates and other |
Codecov Report
Additional details and impacted files@@ Coverage Diff @@
## main #6881 +/- ##
==========================================
- Coverage 77.72% 77.58% -0.15%
==========================================
Files 310 310
Lines 41416 41416
==========================================
- Hits 32192 32134 -58
- Misses 9224 9282 +58 |
CI runs both commands in a matrix, and both of them must pass. (With and without |
Ah I missed that, thanks! |
* build: Upgrade to ed5519-zebra 4.0.0 * skip-tree hashbrown =0.13.2 because ed25519-zebra is 0.14.0 and a dep of metrics-exporter-prometheus is 0.13.2 * Use correct versions in deny.toml * Oops turns out we need both exceptions --------- Co-authored-by: teor <teor@riseup.net>
Motivation
Aligns with other dependencies that also rely on
curve25519-dalek 4.0.0+
Solution
zebra-chain
tower-batch
dev dependenciescurve25519-dalek
denial indeny.toml
cargo update
Confirmed via
cargo tree --duplicates
that we have nocurve25519-dalek
duplicate versions.Review
Reviewer Checklist