Repository navigation
deps: nostr-bbs-core beta.19, k256 0.14, solid-pod-rs alpha.21 - #41
Merged
Merged
Conversation
…C-2026-0387 services/dream-engine pinned nostr-bbs-core =1.0.0-beta.16 and k256 0.13.4, and services/nostr-pod-bridge k256 0.13, so both locks still carried crypto-bigint 0.5.5. dream-engine moves to core =1.0.0-beta.19 (now on crates.io, kit tag v1.0.0-beta.19) and k256 0.14.0, whose SigningKey is the type core signs with; no source change was needed. The bridge moves to k256 0.14, renaming ToEncodedPoint::to_encoded_point to ToSec1Point::to_sec1_point (the 0.14 name; the old trait is a deprecated stub). Both locks now resolve crypto-bigint 0.7.10 only. dream-engine: 207 tests pass. nostr-pod-bridge: 219 tests pass. Co-Authored-By: jjohare <github@thedreamlab.uk>
…he bridge alpha.21 moves openidconnect to 4.1 (p256 0.14), taking RUSTSEC-2026-0387 (crypto-bigint 0.5.5) off the OIDC path, and actix-web 4.13 -> 4.18 (RUSTSEC-2026-0177/0178). It also ships the #12-#14 nightly fixes. - lib/solid-pod-rs.nix: version, rev, srcHash; vendored lock re-taken from the release commit (no crypto-bigint 0.5 left). - lib/nostr-pod-bridge.nix: solidRev/solidHash moved in step (G-20). forumRev a3812b8e stays: crates/nostr-bbs-core there is byte-identical to the beta.19 release commit 6064622. - services/nostr-pod-bridge: lock resolves solid-pod-rs(-nostr) alpha.21; 219 tests pass. srcHash is the NAR sha256 of the GitHub archive, computed without nix by a NAR serialiser checked against alpha.20's existing srcHash (exact match). Co-Authored-By: jjohare <github@thedreamlab.uk>
The house seat and sidestr-admin were built from forum dd45447, whose lock carries nostr-bbs-core beta.16 on k256 0.13 / crypto-bigint 0.5.5 (RUSTSEC-2026-0387). Move rev to 6064622 (tag v1.0.0-beta.19), the website's KIT_REF since today, as the derivation's own rule requires. - hash: NAR sha256 of the commit archive, from the same serialiser that reproduces both the old dd45447 hash and solid-pod-rs alpha.20 exactly. - lock: vendored byte-identical from 6064622; the dd45447 copy, used only here, is removed. - The citizen's crates are unchanged since dd45447; poker-citizen, poker and sidestr-admin pass 90 tests with --locked at 6064622. Co-Authored-By: jjohare <github@thedreamlab.uk>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Repins agentbox's consumers of the two crates republished today.
services/dream-engine:nostr-bbs-core=1.0.0-beta.19 andk2560.14 (RUSTSEC-2026-0387). No code changes; 207 tests pass.services/nostr-pod-bridge:k2560.14 (ToSec1Point,SecretKey::from_slice); lock resolvesnostr-bbs-corebeta.19 and solid-pod-rs alpha.21. 219 tests pass.lib/solid-pod-rs.nix/lib/nostr-pod-bridge.nix: solid-pod-rs 0.5.0-alpha.21 (27e1899, tagv0.5.0-alpha.21) with a fresh vendored lock. That release takescrypto-bigint 0.5.5off the OIDC path and moves actix-web to 4.18 (RUSTSEC-2026-0177/0178).forumRev a3812b8estays:nostr-bbs-corethere is byte-identical to the beta.19 release commit.srcHashwas computed with a NAR serialiser that reproduces alpha.20's existing hash exactly; the Nix build on the host will confirm it (a mismatch fails loudly with the right value).The image rebuild is a host step and has not run.
🤖 Generated by Claude Code