zip-rs / zip-old

Zip implementation in Rust
MIT License
731 stars 204 forks source link

chore(deps): update constant_time_eq requirement from 0.1.5 to 0.3.0 #455

Open dependabot[bot] opened 4 months ago

dependabot[bot] commented 4 months ago

Updates the requirements on constant_time_eq to permit the latest version.

Changelog

Sourced from constant_time_eq's changelog.

0.3.0

  • Use black_box instead of volatile read when inline assembly is not available.
  • Increase minimum Rust version to 1.66, which is when black_box was stabilized.

0.2.6

  • New tests using the count_instructions crate; no functional changes.

0.2.5

  • Add #[must_use] to all functions.

0.2.4

  • Since CC0 is no longer accepted as a license for code by Fedora, also allow MIT-0 or Apache-2.0 as options. No code changes.

0.2.3

  • Add fixed-size variant for arrays of any size (using const generics).

0.2.2

  • Set rust-version in Cargo.toml to 1.59.

0.2.1

  • Reduce inlining of variable-size variant. In 0.1.5, the loop was not inlined, and it can be a bit large due to the auto-vectorization. Go back to how it was in 0.1.5, but allowing the compiler to inline if it believes it would be a speed gain.

0.2.0

  • Use inline assembly when available to hide from the optimizer.
  • When inline assembly is not available, use both a volatile read and disabled inlining.
  • Increase minimum Rust version to 1.59, which is the first with inline assembly.

0.1.5

  • Add fixed-size variant for arrays with sizes 16 bytes, 32 bytes, and 64 bytes.
Commits
  • 09a3462 Release 0.3.0
  • 7c45cf6 Use black_box for no-asm fallback
  • 0e75235 Use count_instructions to validate optimizer_hide directly
  • b8b503b Small test cleanup
  • e04b1ea Small test cleanup
  • 8753949 Release 0.2.6
  • 0b4cea3 Show that count_instructions tests can detect early returns
  • 81e118a Run count_instructions tests in parallel
  • 676d5fb Fix github tests
  • f1c4d45 Fix github tests
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)