Skip to content

Cargo.lock: bump yanked chacha20 0.10.1 → 0.10.2 (unblocks the deny gate) - #316

Merged
Sorcecoder merged 1 commit into
mainfrom
fix/ci-yanked-chacha20
Sep 1, 2026
Merged

Sorcecoder merged 1 commit into
mainfrom
fix/ci-yanked-chacha20

Conversation

@Sorcecoder

Copy link
Copy Markdown
Contributor

CI firefight. chacha20 0.10.1 was yanked upstream; deny.toml sets yanked = "deny", so cargo deny check failed the Deny gate step on every PR (including docs-only #308) — purely environmental. Pulled in transitively via rand → tungstenite → tokio-tungstenite → jerrycan-realtime. Targeted cargo update -p chacha20@0.10.1 → 0.10.2 (1 package). jerrycan-auth's separate chacha20 0.9.1 line (via chacha20poly1305, the token-at-rest path) is not yanked and untouched.

Verified locally: cargo deny check advisories PASS, cargo audit PASS, cargo build/test -p jerrycan-realtime PASS. Cargo.lock only. Merge first so the nine staged 0.7.31 PRs re-run green.

…d/tungstenite in jerrycan-realtime); unblocks cargo deny yanked=deny
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant