Releases: iotaledger/stronghold.rs
stronghold-engine v2.0.0-rc.1
Updating crates.io index
Cargo Audit
\
`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 553 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (258 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 2.0.0-rc.1
├── stronghold_native 0.1.0
└── iota_stronghold 2.0.0-rc.1
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
└── iota_stronghold 2.0.0-rc.1
Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 2.0.0-rc.1
│ │ └── stronghold_engine 2.0.0-rc.1
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 2.0.0-rc.1
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 2.0.0-rc.1
│ │ │ └── iota_stronghold 2.0.0-rc.1
│ │ └── iota_stronghold 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
├── criterion 0.4.0
│ ├── stronghold_engine 2.0.0-rc.1
│ ├── stronghold-runtime 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
└── clap 3.2.25
├── iota_stronghold 2.0.0-rc.1
└── criterion 0.4.0
warning: 2 allowed warnings found
\
`
[2.0.0-rc.1]
f9619747
(#489) Added support for Secp256k1 ECDSA with SHA256/Keccak256 variants.
Bumpiota-crypto
version to 0.22.1.
Dependencies
- Upgraded to
stronghold-runtime@2.0.0-rc.1
Cargo Publish
\
`
Updating crates.io index
Packaging stronghold_engine v2.0.0-rc.1 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
Packaged 47 files, 181.0KiB (52.1KiB compressed)
Uploading stronghold_engine v2.0.0-rc.1 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Uploaded stronghold_engine v2.0.0-rc.1 to registry crates-io
note: Waiting for stronghold_engine v2.0.0-rc.1
to be available at registry crates-io
.
You may press ctrl-c to skip waiting; the crate should be available shortly.
Published stronghold_engine v2.0.0-rc.1 at registry crates-io
\
`
iota-stronghold v2.0.0-rc.1
Updating crates.io index
Cargo Audit
\
`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 553 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (258 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 2.0.0-rc.1
├── stronghold_native 0.1.0
└── iota_stronghold 2.0.0-rc.1
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
└── iota_stronghold 2.0.0-rc.1
Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 2.0.0-rc.1
│ │ └── stronghold_engine 2.0.0-rc.1
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 2.0.0-rc.1
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 2.0.0-rc.1
│ │ │ └── iota_stronghold 2.0.0-rc.1
│ │ └── iota_stronghold 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
├── criterion 0.4.0
│ ├── stronghold_engine 2.0.0-rc.1
│ ├── stronghold-runtime 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
└── clap 3.2.25
├── iota_stronghold 2.0.0-rc.1
└── criterion 0.4.0
warning: 2 allowed warnings found
\
`
[2.0.0-rc.1]
f9619747
(#489) Added support for Secp256k1 ECDSA with SHA256/Keccak256 variants.
Bumpiota-crypto
version to 0.22.1.
Dependencies
- Upgraded to
stronghold-engine@2.0.0-rc.1
- Upgraded to
stronghold-runtime@2.0.0-rc.1
Cargo Publish
\
`
Updating crates.io index
Packaging iota_stronghold v2.0.0-rc.1 (/home/runner/work/stronghold.rs/stronghold.rs/client)
Updating crates.io index
Packaged 44 files, 348.0KiB (75.6KiB compressed)
Uploading iota_stronghold v2.0.0-rc.1 (/home/runner/work/stronghold.rs/stronghold.rs/client)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Uploaded iota_stronghold v2.0.0-rc.1 to registry crates-io
note: Waiting for iota_stronghold v2.0.0-rc.1
to be available at registry crates-io
.
You may press ctrl-c to skip waiting; the crate should be available shortly.
Published iota_stronghold v2.0.0-rc.1 at registry crates-io
\
`
stronghold-runtime v2.0.0-rc.0
Updating crates.io index
Cargo Audit
\
`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 553 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (258 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 2.0.0-rc.0
├── stronghold_native 0.1.0
└── iota_stronghold 2.0.0-rc.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── iota_stronghold 2.0.0-rc.0
Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ │ └── stronghold_engine 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 2.0.0-rc.0
│ │ │ └── iota_stronghold 2.0.0-rc.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
├── criterion 0.4.0
│ ├── stronghold_engine 2.0.0-rc.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── clap 3.2.25
├── iota_stronghold 2.0.0-rc.0
└── criterion 0.4.0
warning: 2 allowed warnings found
\
`
[2.0.0-rc.0]
12ce12fe
Secp256k1 ECDSA + SLIP-10 support added.
Bumpiota-crypto
version to 0.21.2.1e72f00f
(#474) Upgraded snapshot format to age-encryption.org/v1 with password-based recipient stanza. This resolves the issue with the previous snapshot format encryption being insecure if used with weak passwords. Snapshot encryption doesn't use associated data.
Added sensitive data zeroization which would otherwise leak in stack and heap memory in plaintext after use.
KeyProvider
unsafe constructorswith_passphrase_truncated
,with_passphrase_hashed_argon2
were removed,with_passphrase_hashed
constructor should be used instead.
Cargo Publish
\
`
Updating crates.io index
Packaging stronghold-runtime v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
Packaged 42 files, 164.3KiB (38.4KiB compressed)
Uploading stronghold-runtime v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Uploaded stronghold-runtime v2.0.0-rc.0 to registry crates-io
note: Waiting for stronghold-runtime v2.0.0-rc.0
to be available at registry crates-io
.
You may press ctrl-c to skip waiting; the crate should be available shortly.
Published stronghold-runtime v2.0.0-rc.0 at registry crates-io
\
`
stronghold-engine v2.0.0-rc.0
Updating crates.io index
Cargo Audit
\
`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 553 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (258 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 2.0.0-rc.0
├── stronghold_native 0.1.0
└── iota_stronghold 2.0.0-rc.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── iota_stronghold 2.0.0-rc.0
Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ │ └── stronghold_engine 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 2.0.0-rc.0
│ │ │ └── iota_stronghold 2.0.0-rc.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
├── criterion 0.4.0
│ ├── stronghold_engine 2.0.0-rc.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── clap 3.2.25
├── iota_stronghold 2.0.0-rc.0
└── criterion 0.4.0
warning: 2 allowed warnings found
\
`
[2.0.0-rc.0]
12ce12fe
Secp256k1 ECDSA + SLIP-10 support added.
Bumpiota-crypto
version to 0.21.2.1e72f00f
(#474) Upgraded snapshot format to age-encryption.org/v1 with password-based recipient stanza. This resolves the issue with the previous snapshot format encryption being insecure if used with weak passwords. Snapshot encryption doesn't use associated data.
Added sensitive data zeroization which would otherwise leak in stack and heap memory in plaintext after use.
KeyProvider
unsafe constructorswith_passphrase_truncated
,with_passphrase_hashed_argon2
were removed,with_passphrase_hashed
constructor should be used instead.988a9d1f
(#477) Added snapshot encryption work factor public access. It should only be used in tests to decrease snapshot encryption/decryption times. It must not be used in production as low values of work factor might lead to secrets/seeds leakage.
Cargo Publish
\
`
Updating crates.io index
Packaging stronghold_engine v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
Packaged 47 files, 180.6KiB (52.0KiB compressed)
Uploading stronghold_engine v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Uploaded stronghold_engine v2.0.0-rc.0 to registry crates-io
note: Waiting for stronghold_engine v2.0.0-rc.0
to be available at registry crates-io
.
You may press ctrl-c to skip waiting; the crate should be available shortly.
Published stronghold_engine v2.0.0-rc.0 at registry crates-io
\
`
iota-stronghold v2.0.0-rc.0
Updating crates.io index
Cargo Audit
\
`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 553 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (258 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 2.0.0-rc.0
├── stronghold_native 0.1.0
└── iota_stronghold 2.0.0-rc.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── iota_stronghold 2.0.0-rc.0
Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ │ └── stronghold_engine 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 2.0.0-rc.0
│ │ │ └── iota_stronghold 2.0.0-rc.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
├── criterion 0.4.0
│ ├── stronghold_engine 2.0.0-rc.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── clap 3.2.25
├── iota_stronghold 2.0.0-rc.0
└── criterion 0.4.0
warning: 2 allowed warnings found
\
`
[2.0.0-rc.0]
12ce12fe
Secp256k1 ECDSA + SLIP-10 support added.
Bumpiota-crypto
version to 0.21.2.1e72f00f
(#474) Upgraded snapshot format to age-encryption.org/v1 with password-based recipient stanza. This resolves the issue with the previous snapshot format encryption being insecure if used with weak passwords. Snapshot encryption doesn't use associated data.
Added sensitive data zeroization which would otherwise leak in stack and heap memory in plaintext after use.
KeyProvider
unsafe constructorswith_passphrase_truncated
,with_passphrase_hashed_argon2
were removed,with_passphrase_hashed
constructor should be used instead.
Cargo Publish
\
`
Updating crates.io index
Packaging iota_stronghold v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/client)
Updating crates.io index
Packaged 44 files, 347.0KiB (75.4KiB compressed)
Uploading iota_stronghold v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/client)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Uploaded iota_stronghold v2.0.0-rc.0 to registry crates-io
note: Waiting for iota_stronghold v2.0.0-rc.0
to be available at registry crates-io
.
You may press ctrl-c to skip waiting; the crate should be available shortly.
Published iota_stronghold v2.0.0-rc.0 at registry crates-io
\
`
stronghold-runtime v1.1.0
Updating crates.io index
Cargo Audit
\
`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 543 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (240 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 1.1.0
├── stronghold_native 0.1.0
└── iota_stronghold 1.1.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 1.1.0
│ └── iota_stronghold 1.1.0
└── iota_stronghold 1.1.0
Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 1.1.0
│ │ └── stronghold_engine 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 1.1.0
│ │ │ └── iota_stronghold 1.1.0
│ │ └── iota_stronghold 1.1.0
│ └── iota_stronghold 1.1.0
├── criterion 0.4.0
│ ├── stronghold_engine 1.1.0
│ ├── stronghold-runtime 1.1.0
│ └── iota_stronghold 1.1.0
└── clap 3.2.25
├── iota_stronghold 1.1.0
└── criterion 0.4.0
warning: 2 allowed warnings found
\
`
[1.1.0]
- Bump
iota-crypto
version to 0.18.0.Pbkdf2Hmac::count
changed to aNonZeroU32
.
Cargo Publish
\
`
Updating crates.io index
Packaging stronghold-runtime v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
Packaged 42 files, 162.8KiB (37.9KiB compressed)
Uploading stronghold-runtime v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Updating crates.io index
Waiting on stronghold-runtime
to propagate to crates.io index (ctrl-c to wait asynchronously)
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
\
`
stronghold-engine v1.1.0
Updating crates.io index
Cargo Audit
\
`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 543 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (240 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 1.1.0
├── stronghold_native 0.1.0
└── iota_stronghold 1.1.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 1.1.0
│ └── iota_stronghold 1.1.0
└── iota_stronghold 1.1.0
Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 1.1.0
│ │ └── stronghold_engine 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 1.1.0
│ │ │ └── iota_stronghold 1.1.0
│ │ └── iota_stronghold 1.1.0
│ └── iota_stronghold 1.1.0
├── criterion 0.4.0
│ ├── stronghold_engine 1.1.0
│ ├── stronghold-runtime 1.1.0
│ └── iota_stronghold 1.1.0
└── clap 3.2.25
├── iota_stronghold 1.1.0
└── criterion 0.4.0
warning: 2 allowed warnings found
\
`
[1.1.0]
- Bump
iota-crypto
version to 0.18.0.Pbkdf2Hmac::count
changed to aNonZeroU32
.
Cargo Publish
\
`
Updating crates.io index
Packaging stronghold_engine v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
Packaged 43 files, 177.0KiB (54.9KiB compressed)
Uploading stronghold_engine v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Updating crates.io index
Waiting on stronghold_engine
to propagate to crates.io index (ctrl-c to wait asynchronously)
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
\
`
iota-stronghold v1.1.0
Updating crates.io index
Cargo Audit
\
`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 543 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (240 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 1.1.0
├── stronghold_native 0.1.0
└── iota_stronghold 1.1.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 1.1.0
│ └── iota_stronghold 1.1.0
└── iota_stronghold 1.1.0
Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 1.1.0
│ │ └── stronghold_engine 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 1.1.0
│ │ │ └── iota_stronghold 1.1.0
│ │ └── iota_stronghold 1.1.0
│ └── iota_stronghold 1.1.0
├── criterion 0.4.0
│ ├── stronghold_engine 1.1.0
│ ├── stronghold-runtime 1.1.0
│ └── iota_stronghold 1.1.0
└── clap 3.2.25
├── iota_stronghold 1.1.0
└── criterion 0.4.0
warning: 2 allowed warnings found
\
`
[1.1.0]
- Bump
iota-crypto
version to 0.18.0.Pbkdf2Hmac::count
changed to aNonZeroU32
.
Cargo Publish
\
`
Updating crates.io index
Packaging iota_stronghold v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/client)
Packaged 44 files, 331.8KiB (71.7KiB compressed)
Uploading iota_stronghold v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/client)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Updating crates.io index
Waiting on iota_stronghold
to propagate to crates.io index (ctrl-c to wait asynchronously)
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
\
`
stronghold-runtime v1.0.2
Updating crates.io index
Cargo Audit
\
`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 469 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (217 crate dependencies)
\
`
[1.0.2]
- Disable frag module for android and ios targets.
Cargo Publish
\
`
Updating crates.io index
Packaging stronghold-runtime v1.0.2 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
Uploading stronghold-runtime v1.0.2 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
\
`
stronghold-engine v1.0.2
Updating crates.io index
Cargo Audit
\
`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 469 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (217 crate dependencies)
\
`
[1.0.2]
- Disable frag module for android and ios targets.
Cargo Publish
\
`
Updating crates.io index
Packaging stronghold_engine v1.0.2 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
Uploading stronghold_engine v1.0.2 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
\
`