Changelog
*Sourced from [curve25519-dalek's changelog](https://github.com/dalek-cryptography/curve25519-dalek/blob/master/CHANGELOG.md).*
> ## 2.0.0
>
> * Fix a data modeling error in the `serde` feature pointed out by Trevor Perrin
> which caused points and scalars to be serialized with length fields rather
> than as fixed-size 32-byte arrays. This is a breaking change, but it fixes
> compatibility with `serde-json` and ensures that the `serde-bincode` encoding
> matches the conventional encoding for X/Ed25519.
> * Update `rand_core` to `0.5`, allowing use with new `rand` versions.
> * Switch from `clear_on_drop` to `zeroize` (by Tony Arcieri).
> * Require `subtle = ^2.2.1` and remove the note advising nightly Rust, which is
> no longer required as of that version of `subtle`. See the `subtle`
> changelog for more details.
> * Update `README.md` for `2.x` series.
> * Remove the `build.rs` hack which loaded the entire crate into its own
> `build.rs` to generate constants, and keep the constants in the source code.
>
> The only significant change is the data model change to the `serde` feature;
> besides the `rand_core` version bump, there are no other user-visible changes.
Commits
- [`d889ac8`](https://github.com/dalek-cryptography/curve25519-dalek/commit/d889ac8a15c9b802f846b49f7f243e0a4fc5ffec) Finalize 2.0.0
- [`db6a0b1`](https://github.com/dalek-cryptography/curve25519-dalek/commit/db6a0b118769f59a3cadda3cc0dbd042a1613214) Merge branch 'master' into develop
- [`58d32ea`](https://github.com/dalek-cryptography/curve25519-dalek/commit/58d32ea27fc0b7d519f5fcde65a40d02346ba8eb) Merge branch 'release/2.0.0-alpha.2'
- [`69d72f9`](https://github.com/dalek-cryptography/curve25519-dalek/commit/69d72f92d60f8c59adb4bee036c5989061183918) Bump version to 2.0.0-alpha.2 and update changelog.
- [`0168816`](https://github.com/dalek-cryptography/curve25519-dalek/commit/0168816f04d0854abd8dd914a937a7e59d7bdb79) Merge pull request [#307](https://github-redirect.dependabot.com/dalek-cryptography/curve25519-dalek/issues/307) from dalek-cryptography/update-nightly-note-subtle
- [`2b51978`](https://github.com/dalek-cryptography/curve25519-dalek/commit/2b51978553dcb3a9ff27e3bf895b59671b8bd9f7) Remove nightly recommendation now that subtle has stable opt barriers.
- [`77203aa`](https://github.com/dalek-cryptography/curve25519-dalek/commit/77203aa1cb87ac3a958c491b3976bfbfa49a1bf3) Merge pull request [#306](https://github-redirect.dependabot.com/dalek-cryptography/curve25519-dalek/issues/306) from isislovecruft/feature/236-merge-rebase
- [`4d1dfba`](https://github.com/dalek-cryptography/curve25519-dalek/commit/4d1dfbaf035287f08f4b4cc0dc08f0ced2dd516a) Merge pull request [#305](https://github-redirect.dependabot.com/dalek-cryptography/curve25519-dalek/issues/305) from isislovecruft/fix/unused-tmp2-warning
- [`4423394`](https://github.com/dalek-cryptography/curve25519-dalek/commit/4423394ed8d6c6aaad2249b29a6c8f62cdde18a0) Fix warning that a temporary value isn't used.
- [`57f19e0`](https://github.com/dalek-cryptography/curve25519-dalek/commit/57f19e018ff8315d144f74ff5d5a4ee6dae93e89) Merge remote-tracking branch 'DebugSteven/zeroize' into feature/236-merge-rebase
- Additional commits viewable in [compare view](https://github.com/dalek-cryptography/curve25519-dalek/compare/1.2.3...2.0.0)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Bumps curve25519-dalek from 1.2.3 to 2.0.0.
Changelog
*Sourced from [curve25519-dalek's changelog](https://github.com/dalek-cryptography/curve25519-dalek/blob/master/CHANGELOG.md).* > ## 2.0.0 > > * Fix a data modeling error in the `serde` feature pointed out by Trevor Perrin > which caused points and scalars to be serialized with length fields rather > than as fixed-size 32-byte arrays. This is a breaking change, but it fixes > compatibility with `serde-json` and ensures that the `serde-bincode` encoding > matches the conventional encoding for X/Ed25519. > * Update `rand_core` to `0.5`, allowing use with new `rand` versions. > * Switch from `clear_on_drop` to `zeroize` (by Tony Arcieri). > * Require `subtle = ^2.2.1` and remove the note advising nightly Rust, which is > no longer required as of that version of `subtle`. See the `subtle` > changelog for more details. > * Update `README.md` for `2.x` series. > * Remove the `build.rs` hack which loaded the entire crate into its own > `build.rs` to generate constants, and keep the constants in the source code. > > The only significant change is the data model change to the `serde` feature; > besides the `rand_core` version bump, there are no other user-visible changes.Commits
- [`d889ac8`](https://github.com/dalek-cryptography/curve25519-dalek/commit/d889ac8a15c9b802f846b49f7f243e0a4fc5ffec) Finalize 2.0.0 - [`db6a0b1`](https://github.com/dalek-cryptography/curve25519-dalek/commit/db6a0b118769f59a3cadda3cc0dbd042a1613214) Merge branch 'master' into develop - [`58d32ea`](https://github.com/dalek-cryptography/curve25519-dalek/commit/58d32ea27fc0b7d519f5fcde65a40d02346ba8eb) Merge branch 'release/2.0.0-alpha.2' - [`69d72f9`](https://github.com/dalek-cryptography/curve25519-dalek/commit/69d72f92d60f8c59adb4bee036c5989061183918) Bump version to 2.0.0-alpha.2 and update changelog. - [`0168816`](https://github.com/dalek-cryptography/curve25519-dalek/commit/0168816f04d0854abd8dd914a937a7e59d7bdb79) Merge pull request [#307](https://github-redirect.dependabot.com/dalek-cryptography/curve25519-dalek/issues/307) from dalek-cryptography/update-nightly-note-subtle - [`2b51978`](https://github.com/dalek-cryptography/curve25519-dalek/commit/2b51978553dcb3a9ff27e3bf895b59671b8bd9f7) Remove nightly recommendation now that subtle has stable opt barriers. - [`77203aa`](https://github.com/dalek-cryptography/curve25519-dalek/commit/77203aa1cb87ac3a958c491b3976bfbfa49a1bf3) Merge pull request [#306](https://github-redirect.dependabot.com/dalek-cryptography/curve25519-dalek/issues/306) from isislovecruft/feature/236-merge-rebase - [`4d1dfba`](https://github.com/dalek-cryptography/curve25519-dalek/commit/4d1dfbaf035287f08f4b4cc0dc08f0ced2dd516a) Merge pull request [#305](https://github-redirect.dependabot.com/dalek-cryptography/curve25519-dalek/issues/305) from isislovecruft/fix/unused-tmp2-warning - [`4423394`](https://github.com/dalek-cryptography/curve25519-dalek/commit/4423394ed8d6c6aaad2249b29a6c8f62cdde18a0) Fix warning that a temporary value isn't used. - [`57f19e0`](https://github.com/dalek-cryptography/curve25519-dalek/commit/57f19e018ff8315d144f74ff5d5a4ee6dae93e89) Merge remote-tracking branch 'DebugSteven/zeroize' into feature/236-merge-rebase - Additional commits viewable in [compare view](https://github.com/dalek-cryptography/curve25519-dalek/compare/1.2.3...2.0.0)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)