hyperledger / aries-vcx

aries-vcx is set of crates to work with DIDs, DID Documents, DIDComm, Verifiable Credentials and Hyperledger Aries.
https://didcomm.org
Apache License 2.0
125 stars 83 forks source link

chore(deps): update sodiumoxide requirement from 0.0.16 to 0.2.7 in /aries/misc/legacy/libvdrtools/indy-utils #1195

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Updates the requirements on sodiumoxide to permit the latest version.

Changelog

Sourced from sodiumoxide's changelog.

0.2.7 (Jun 21, 2021)

  • Add ed25519 to x25519 conversion methods (#456)
  • Update prebuilt windows binaries to those published at 2020-12-31 at libsodium.org
  • Update libsodium submodule to stable branch commit 8acd227
  • Fix no_std build
  • Expose the sodium_pad and sodium_unpad functions
  • Switch from using xcopy to using walkdir + fs::copy in build script
  • Add support for the AES256-GCM AEAD construction
  • Expose randombytes_buf_deterministic function (#431)

0.2.6 (Jul 19, 2020)

  • Remove support for using vcpkg for windows (msvc) builds since it was undertested
  • Update prebuilt windows binaries to those published at 2020-06-30 at libsodium.org
  • Update libsodium submodule to latest stable branch commit. (#420, #400)
  • Avoid ptr_cast feature as it was not yet stable in Rust 1.36. (#408)
  • Fix build script by using the correct arguments for xcopy (#407)
  • Avoid dev dependencies on tar and libflate by including libsodium as a Git submodule. (#393)
  • Add bindings to KDF functions (#351)
  • Expose libsodium's hexadecimal encoding/decoding helper functions (#390)
  • Expose libsodium's Base64 encoding/decoding helper functions (#391)
  • remove ill-advised gen_nonce functions (#395)

0.2.5 (Oct 11, 2019)

  • Fix Digest PartialEq (#381)
  • Fix compiler warnings (#380)
  • Use copy_from_slice instead of manual loop where possible (#378)

0.2.4 (Sep 3, 2019)

  • Fixed erronoeus dependency on older libsodium-sys
  • Fixed use of deprecated try! macro (#369)

0.2.3 (Sep 1, 2019)

  • Allow reusing Vec for secretstream (#357)
  • Replace mem::uninitialized with MaybeUninit (#350, #356)
  • Fix warning about deprecated uint64_t (#358)
  • Fix path to ./configure script (#355)
  • Add API to derive Ed25519 public keys from secret keys (#345)
  • Add DEP_SODIUM_INCLUDE & DEP_SODIUM_LIB env variables (#344)
  • Update libsodium to 1.0.18 (#342)

0.2.2 (May 16, 2019)

  • Bundle libsodium .a .lib for win & cygwin (#332)
  • Add AsRef<[u8]> for newtypes (#323)
  • Implement memory locking and unlocking (#324)

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
JamesKEbert commented 5 months ago

@dependabot close Don't want to touch Sodium Oxide -- in this case also given that we're working to remove libvdrtools entirely.