Skip to content

Revert digest bump to 0.10.7 — ecosystem not ready for 0.11.x#7287

Closed
Copilot wants to merge 3 commits into
dependabot/cargo/digest-0.11.1from
copilot/sub-pr-7259
Closed

Revert digest bump to 0.10.7 — ecosystem not ready for 0.11.x#7287
Copilot wants to merge 3 commits into
dependabot/cargo/digest-0.11.1from
copilot/sub-pr-7259

Conversation

Copilot AI commented Mar 1, 2026

Copy link
Copy Markdown
Contributor

digest 0.11.1 is a major breaking release that the RustCrypto hash crate ecosystem hasn't caught up to yet. Bumping only digest while sha-1, sha2, sha3, blake2, hmac, md-5, and pbkdf2 all still depend on digest 0.10.x causes Cargo to resolve two incompatible versions simultaneously — digest 0.10.x traits and digest 0.11.x traits are distinct types, so hash types from those crates can't satisfy the 0.11.x bounds used in hashlib.rs.

Notable 0.11.x breaking changes:

  • digest::core_api renamed to digest::block_api
  • CoreWrapper, RtVariableCoreWrapper, XofReaderCoreWrapper removed
  • crypto-common re-export moved to digest::common; generic-array replaced with hybrid-array

Changes:

  • Revert digest to "0.10.7" in crates/stdlib/Cargo.toml
  • Update Cargo.lock to drop digest 0.11.1, block-buffer 0.12.0, crypto-common 0.2.1, and hybrid-array 0.4.7

This bump can be re-applied once the ecosystem ships compatible versions (sha2 0.11, sha3 0.11, hmac 0.13, etc.).


🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

Copilot AI and others added 2 commits March 1, 2026 06:39
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com>
…h 0.11.x

Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com>

Copilot AI commented Mar 1, 2026

Copy link
Copy Markdown
Contributor Author

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • docs.rs
    • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI changed the title [WIP] Update digest dependency from 0.10.7 to 0.11.1 Revert digest bump to 0.10.7 — ecosystem not ready for 0.11.x Mar 1, 2026
@youknowone youknowone closed this Mar 1, 2026
@youknowone youknowone deleted the copilot/sub-pr-7259 branch March 7, 2026 00:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants