Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 20, 2023

Updates the requirements on tendermint-proto to permit the latest version.

Release notes

Sourced from tendermint-proto's releases.

v0.29.0

📖 CHANGELOG

Changelog

Sourced from tendermint-proto's changelog.

v0.29.0

Feb 17, 2023

This release features modularity improvements for the cryptographic routines, as well as fixes related to block verification and the use of a consensus-friendly ed25519 crate.

BREAKING CHANGES

  • [tendermint] Make implementations of cryptographic primitives replaceable (#1238).

    • Provide a Sha256 trait in module crypto and make digest hashing implementations available through it.
    • Provide a Verifier trait in module crypto::signature to enable alternative implementations of signature verification available through it. An Error enum is defined in the same module, representing the error cases that can arise in the implementation in a deliberately opaque way.
    • The module crypto::default provides pure Rust implementations of the cryptographic traits. The module is made available by a new rust-crypto feature, enabled by default.
    • merkle::simple_hash_from_byte_vectors is made generic over an implementation of the new MerkleHash trait. Implementations for Rust-Crypto conformant digest objects and the non-incremental crypto::Sha256 API are provided in the crate.
    • The Header::hash and ValidatorSet::hash methods are gated by the rust-crypto feature. Generic hashing methods not dependent on the default crypto implementations are added for both types, named hash_with.
    • Conversions to account::Id and node::Id from PublicKey and curve-specific key types are gated by the rust-crypto feature.
    • The validator::Info::new method is gated by the rust-crypto feature.
    • Remove a deprecated constant signature::ED25519_SIGNATURE_SIZE.
  • [tendermint-light-client-verifier] Changes for the new Tendermint crypto API (#1238).

    • The rust-crypto feature, enabled by default, guards the batteries-included implementation types: ProdVerifier, ProdPredicates, ProdVotingPowerCalculator.
    • Remove the operations::hasher API (Hasher and ProdHasher), made unnecessary by the new crypto abstractions in the tendermint crate.
    • The VerificationPredicates trait features a Sha256 associated type to represent the hasher implementation, replacing the &dyn Hasher parameter passed to methods.
    • Change the type of the VerificationErrorDetail::FaultySigner field validator_set to ValidatorSet. This removes a hasher dependency from CommitValidator, and ProdCommitValidator is now an empty dummy type.
  • [tendermint-light-client] Changes for the new Tendermint crypto API (#1238).

    • The rust-crypto feature enables the default crypto implementations, and is required by the rpc-client and unstable features.

... (truncated)

Commits
  • 5e46d85 ci: Fix runner for release workflow (#1269)
  • 390cc90 release: v0.29.0 (#1267)
  • 8ba8550 ci: Automate release process (#1268)
  • 89c8add Derive PartialEq, Eq on ProdCommitValidator (#1264)
  • 47e28b5 Make crypto implementations replaceable (#1238)
  • 3c79d14 Update all crates to Rust edition 2021 and fix clippy warnings introduced in ...
  • 95e4505 deps: Use ed25519-consensus instead of ed25519-dalek (#1067) (#1245)
  • 5020067 tendermint: fix minimal-versions correctness for bytes (#1257)
  • f776dac light-client: Fix verification of blocks between two trusted heights (#1247)
  • d28b935 Fix lints that trigger clippy 0.1.66 (#1253)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [tendermint-proto](https://github.com/informalsystems/tendermint-rs) to permit the latest version.
- [Release notes](https://github.com/informalsystems/tendermint-rs/releases)
- [Changelog](https://github.com/informalsystems/tendermint-rs/blob/main/CHANGELOG.md)
- [Commits](cometbft/tendermint-rs@v0.25.0...v0.29.0)

---
updated-dependencies:
- dependency-name: tendermint-proto
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 27, 2023

Superseded by #62.

@dependabot dependabot bot closed this Feb 27, 2023
@dependabot dependabot bot deleted the dependabot/cargo/tendermint-proto-0.29.0 branch February 27, 2023 21:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency upgrades

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant