Skip to content

Releases: iotaledger/stronghold.rs

stronghold-engine v2.0.0-rc.1

11 Jul 09:31
@github-actions github-actions
stronghold-engine-v2.0.0-rc.1
4231643
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
stronghold-engine v2.0.0-rc.1

Updating crates.io index

Cargo Audit

\`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 553 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (258 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 2.0.0-rc.1
├── stronghold_native 0.1.0
└── iota_stronghold 2.0.0-rc.1
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
└── iota_stronghold 2.0.0-rc.1

Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 2.0.0-rc.1
│ │ └── stronghold_engine 2.0.0-rc.1
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 2.0.0-rc.1
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 2.0.0-rc.1
│ │ │ └── iota_stronghold 2.0.0-rc.1
│ │ └── iota_stronghold 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
├── criterion 0.4.0
│ ├── stronghold_engine 2.0.0-rc.1
│ ├── stronghold-runtime 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
└── clap 3.2.25
├── iota_stronghold 2.0.0-rc.1
└── criterion 0.4.0

warning: 2 allowed warnings found
\`

[2.0.0-rc.1]

  • f9619747(#489) Added support for Secp256k1 ECDSA with SHA256/Keccak256 variants.
    Bump iota-crypto version to 0.22.1.

Dependencies

  • Upgraded to stronghold-runtime@2.0.0-rc.1

Cargo Publish

\`
Updating crates.io index
Packaging stronghold_engine v2.0.0-rc.1 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
Packaged 47 files, 181.0KiB (52.1KiB compressed)
Uploading stronghold_engine v2.0.0-rc.1 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Uploaded stronghold_engine v2.0.0-rc.1 to registry crates-io
note: Waiting for stronghold_engine v2.0.0-rc.1 to be available at registry crates-io.
You may press ctrl-c to skip waiting; the crate should be available shortly.
Published stronghold_engine v2.0.0-rc.1 at registry crates-io
\`

Assets 2
Loading

iota-stronghold v2.0.0-rc.1

11 Jul 09:33
@github-actions github-actions
iota-stronghold-v2.0.0-rc.1
4231643
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
iota-stronghold v2.0.0-rc.1

Updating crates.io index

Cargo Audit

\`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 553 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (258 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 2.0.0-rc.1
├── stronghold_native 0.1.0
└── iota_stronghold 2.0.0-rc.1
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
└── iota_stronghold 2.0.0-rc.1

Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 2.0.0-rc.1
│ │ └── stronghold_engine 2.0.0-rc.1
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 2.0.0-rc.1
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 2.0.0-rc.1
│ │ │ └── iota_stronghold 2.0.0-rc.1
│ │ └── iota_stronghold 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
├── criterion 0.4.0
│ ├── stronghold_engine 2.0.0-rc.1
│ ├── stronghold-runtime 2.0.0-rc.1
│ └── iota_stronghold 2.0.0-rc.1
└── clap 3.2.25
├── iota_stronghold 2.0.0-rc.1
└── criterion 0.4.0

warning: 2 allowed warnings found
\`

[2.0.0-rc.1]

  • f9619747(#489) Added support for Secp256k1 ECDSA with SHA256/Keccak256 variants.
    Bump iota-crypto version to 0.22.1.

Dependencies

  • Upgraded to stronghold-engine@2.0.0-rc.1
  • Upgraded to stronghold-runtime@2.0.0-rc.1

Cargo Publish

\`
Updating crates.io index
Packaging iota_stronghold v2.0.0-rc.1 (/home/runner/work/stronghold.rs/stronghold.rs/client)
Updating crates.io index
Packaged 44 files, 348.0KiB (75.6KiB compressed)
Uploading iota_stronghold v2.0.0-rc.1 (/home/runner/work/stronghold.rs/stronghold.rs/client)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Uploaded iota_stronghold v2.0.0-rc.1 to registry crates-io
note: Waiting for iota_stronghold v2.0.0-rc.1 to be available at registry crates-io.
You may press ctrl-c to skip waiting; the crate should be available shortly.
Published iota_stronghold v2.0.0-rc.1 at registry crates-io
\`

Assets 2
Loading

stronghold-runtime v2.0.0-rc.0

03 Jul 12:57
@github-actions github-actions
stronghold-runtime-v2.0.0-rc.0
87d0ae0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
stronghold-runtime v2.0.0-rc.0

Updating crates.io index

Cargo Audit

\`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 553 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (258 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 2.0.0-rc.0
├── stronghold_native 0.1.0
└── iota_stronghold 2.0.0-rc.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── iota_stronghold 2.0.0-rc.0

Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ │ └── stronghold_engine 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 2.0.0-rc.0
│ │ │ └── iota_stronghold 2.0.0-rc.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
├── criterion 0.4.0
│ ├── stronghold_engine 2.0.0-rc.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── clap 3.2.25
├── iota_stronghold 2.0.0-rc.0
└── criterion 0.4.0

warning: 2 allowed warnings found
\`

[2.0.0-rc.0]

  • 12ce12fe Secp256k1 ECDSA + SLIP-10 support added.
    Bump iota-crypto version to 0.21.2.
  • 1e72f00f(#474) Upgraded snapshot format to age-encryption.org/v1 with password-based recipient stanza. This resolves the issue with the previous snapshot format encryption being insecure if used with weak passwords. Snapshot encryption doesn't use associated data.
    Added sensitive data zeroization which would otherwise leak in stack and heap memory in plaintext after use.
    KeyProvider unsafe constructors with_passphrase_truncated, with_passphrase_hashed_argon2 were removed, with_passphrase_hashed constructor should be used instead.

Cargo Publish

\`
Updating crates.io index
Packaging stronghold-runtime v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
Packaged 42 files, 164.3KiB (38.4KiB compressed)
Uploading stronghold-runtime v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Uploaded stronghold-runtime v2.0.0-rc.0 to registry crates-io
note: Waiting for stronghold-runtime v2.0.0-rc.0 to be available at registry crates-io.
You may press ctrl-c to skip waiting; the crate should be available shortly.
Published stronghold-runtime v2.0.0-rc.0 at registry crates-io
\`

Assets 2
Loading

stronghold-engine v2.0.0-rc.0

03 Jul 12:59
@github-actions github-actions
stronghold-engine-v2.0.0-rc.0
87d0ae0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
stronghold-engine v2.0.0-rc.0

Updating crates.io index

Cargo Audit

\`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 553 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (258 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 2.0.0-rc.0
├── stronghold_native 0.1.0
└── iota_stronghold 2.0.0-rc.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── iota_stronghold 2.0.0-rc.0

Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ │ └── stronghold_engine 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 2.0.0-rc.0
│ │ │ └── iota_stronghold 2.0.0-rc.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
├── criterion 0.4.0
│ ├── stronghold_engine 2.0.0-rc.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── clap 3.2.25
├── iota_stronghold 2.0.0-rc.0
└── criterion 0.4.0

warning: 2 allowed warnings found
\`

[2.0.0-rc.0]

  • 12ce12fe Secp256k1 ECDSA + SLIP-10 support added.
    Bump iota-crypto version to 0.21.2.
  • 1e72f00f(#474) Upgraded snapshot format to age-encryption.org/v1 with password-based recipient stanza. This resolves the issue with the previous snapshot format encryption being insecure if used with weak passwords. Snapshot encryption doesn't use associated data.
    Added sensitive data zeroization which would otherwise leak in stack and heap memory in plaintext after use.
    KeyProvider unsafe constructors with_passphrase_truncated, with_passphrase_hashed_argon2 were removed, with_passphrase_hashed constructor should be used instead.
  • 988a9d1f(#477) Added snapshot encryption work factor public access. It should only be used in tests to decrease snapshot encryption/decryption times. It must not be used in production as low values of work factor might lead to secrets/seeds leakage.

Cargo Publish

\`
Updating crates.io index
Packaging stronghold_engine v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
Packaged 47 files, 180.6KiB (52.0KiB compressed)
Uploading stronghold_engine v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Uploaded stronghold_engine v2.0.0-rc.0 to registry crates-io
note: Waiting for stronghold_engine v2.0.0-rc.0 to be available at registry crates-io.
You may press ctrl-c to skip waiting; the crate should be available shortly.
Published stronghold_engine v2.0.0-rc.0 at registry crates-io
\`

Assets 2
Loading

iota-stronghold v2.0.0-rc.0

03 Jul 13:01
@github-actions github-actions
iota-stronghold-v2.0.0-rc.0
87d0ae0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
iota-stronghold v2.0.0-rc.0

Updating crates.io index

Cargo Audit

\`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 553 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (258 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 2.0.0-rc.0
├── stronghold_native 0.1.0
└── iota_stronghold 2.0.0-rc.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── iota_stronghold 2.0.0-rc.0

Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ │ └── stronghold_engine 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 2.0.0-rc.0
│ │ │ └── iota_stronghold 2.0.0-rc.0
│ │ └── iota_stronghold 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
├── criterion 0.4.0
│ ├── stronghold_engine 2.0.0-rc.0
│ ├── stronghold-runtime 2.0.0-rc.0
│ └── iota_stronghold 2.0.0-rc.0
└── clap 3.2.25
├── iota_stronghold 2.0.0-rc.0
└── criterion 0.4.0

warning: 2 allowed warnings found
\`

[2.0.0-rc.0]

  • 12ce12fe Secp256k1 ECDSA + SLIP-10 support added.
    Bump iota-crypto version to 0.21.2.
  • 1e72f00f(#474) Upgraded snapshot format to age-encryption.org/v1 with password-based recipient stanza. This resolves the issue with the previous snapshot format encryption being insecure if used with weak passwords. Snapshot encryption doesn't use associated data.
    Added sensitive data zeroization which would otherwise leak in stack and heap memory in plaintext after use.
    KeyProvider unsafe constructors with_passphrase_truncated, with_passphrase_hashed_argon2 were removed, with_passphrase_hashed constructor should be used instead.

Cargo Publish

\`
Updating crates.io index
Packaging iota_stronghold v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/client)
Updating crates.io index
Packaged 44 files, 347.0KiB (75.4KiB compressed)
Uploading iota_stronghold v2.0.0-rc.0 (/home/runner/work/stronghold.rs/stronghold.rs/client)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Uploaded iota_stronghold v2.0.0-rc.0 to registry crates-io
note: Waiting for iota_stronghold v2.0.0-rc.0 to be available at registry crates-io.
You may press ctrl-c to skip waiting; the crate should be available shortly.
Published iota_stronghold v2.0.0-rc.0 at registry crates-io
\`

Assets 2
Loading

stronghold-runtime v1.1.0

03 May 16:28
@github-actions github-actions
stronghold-runtime-v1.1.0
6429593
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
stronghold-runtime v1.1.0

Updating crates.io index

Cargo Audit

\`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 543 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (240 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 1.1.0
├── stronghold_native 0.1.0
└── iota_stronghold 1.1.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 1.1.0
│ └── iota_stronghold 1.1.0
└── iota_stronghold 1.1.0

Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 1.1.0
│ │ └── stronghold_engine 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 1.1.0
│ │ │ └── iota_stronghold 1.1.0
│ │ └── iota_stronghold 1.1.0
│ └── iota_stronghold 1.1.0
├── criterion 0.4.0
│ ├── stronghold_engine 1.1.0
│ ├── stronghold-runtime 1.1.0
│ └── iota_stronghold 1.1.0
└── clap 3.2.25
├── iota_stronghold 1.1.0
└── criterion 0.4.0

warning: 2 allowed warnings found
\`

[1.1.0]

  • Bump iota-crypto version to 0.18.0. Pbkdf2Hmac::count changed to a NonZeroU32.
    • a860896c Bump crypto on 2023-05-03
    • 03ff2dcd better changelog on 2023-05-03
    • 74e564d2 even more betterer changelog on 2023-05-03
    • 6d32ae45 remove native on 2023-05-03

Cargo Publish

\`
Updating crates.io index
Packaging stronghold-runtime v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
Packaged 42 files, 162.8KiB (37.9KiB compressed)
Uploading stronghold-runtime v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Updating crates.io index
Waiting on stronghold-runtime to propagate to crates.io index (ctrl-c to wait asynchronously)
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
\`

Assets 2
Loading

stronghold-engine v1.1.0

03 May 16:29
@github-actions github-actions
stronghold-engine-v1.1.0
6429593
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
stronghold-engine v1.1.0

Updating crates.io index

Cargo Audit

\`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 543 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (240 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 1.1.0
├── stronghold_native 0.1.0
└── iota_stronghold 1.1.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 1.1.0
│ └── iota_stronghold 1.1.0
└── iota_stronghold 1.1.0

Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 1.1.0
│ │ └── stronghold_engine 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 1.1.0
│ │ │ └── iota_stronghold 1.1.0
│ │ └── iota_stronghold 1.1.0
│ └── iota_stronghold 1.1.0
├── criterion 0.4.0
│ ├── stronghold_engine 1.1.0
│ ├── stronghold-runtime 1.1.0
│ └── iota_stronghold 1.1.0
└── clap 3.2.25
├── iota_stronghold 1.1.0
└── criterion 0.4.0

warning: 2 allowed warnings found
\`

[1.1.0]

  • Bump iota-crypto version to 0.18.0. Pbkdf2Hmac::count changed to a NonZeroU32.
    • a860896c Bump crypto on 2023-05-03
    • 03ff2dcd better changelog on 2023-05-03
    • 74e564d2 even more betterer changelog on 2023-05-03
    • 6d32ae45 remove native on 2023-05-03

Cargo Publish

\`
Updating crates.io index
Packaging stronghold_engine v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
Packaged 43 files, 177.0KiB (54.9KiB compressed)
Uploading stronghold_engine v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Updating crates.io index
Waiting on stronghold_engine to propagate to crates.io index (ctrl-c to wait asynchronously)
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
\`

Assets 2
Loading

iota-stronghold v1.1.0

03 May 16:31
@github-actions github-actions
iota-stronghold-v1.1.0
6429593
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
iota-stronghold v1.1.0

Updating crates.io index

Cargo Audit

\`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 543 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (240 crate dependencies)
Crate: json
Version: 0.12.4
Warning: unmaintained
Title: json is unmaintained
Date: 2022-02-01
ID: RUSTSEC-2022-0081
URL: https://rustsec.org/advisories/RUSTSEC-2022-0081
Dependency tree:
json 0.12.4
└── stronghold_engine 1.1.0
├── stronghold_native 0.1.0
└── iota_stronghold 1.1.0
├── stronghold_native 0.1.0
└── stronghold-derive 1.0.0
├── stronghold-utils 1.0.0
│ ├── stronghold_engine 1.1.0
│ └── iota_stronghold 1.1.0
└── iota_stronghold 1.1.0

Crate: atty
Version: 0.2.14
Warning: unsound
Title: Potential unaligned read
Date: 2021-07-04
ID: RUSTSEC-2021-0145
URL: https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
├── env_logger 0.9.3
│ ├── stronghold_native 0.1.0
│ ├── stronghold-runtime 1.1.0
│ │ └── stronghold_engine 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── iota_stronghold 1.1.0
│ │ ├── stronghold_native 0.1.0
│ │ └── stronghold-derive 1.0.0
│ │ ├── stronghold-utils 1.0.0
│ │ │ ├── stronghold_engine 1.1.0
│ │ │ └── iota_stronghold 1.1.0
│ │ └── iota_stronghold 1.1.0
│ └── iota_stronghold 1.1.0
├── criterion 0.4.0
│ ├── stronghold_engine 1.1.0
│ ├── stronghold-runtime 1.1.0
│ └── iota_stronghold 1.1.0
└── clap 3.2.25
├── iota_stronghold 1.1.0
└── criterion 0.4.0

warning: 2 allowed warnings found
\`

[1.1.0]

  • Bump iota-crypto version to 0.18.0. Pbkdf2Hmac::count changed to a NonZeroU32.
    • a860896c Bump crypto on 2023-05-03
    • 03ff2dcd better changelog on 2023-05-03
    • 74e564d2 even more betterer changelog on 2023-05-03
    • 6d32ae45 remove native on 2023-05-03

Cargo Publish

\`
Updating crates.io index
Packaging iota_stronghold v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/client)
Packaged 44 files, 331.8KiB (71.7KiB compressed)
Uploading iota_stronghold v1.1.0 (/home/runner/work/stronghold.rs/stronghold.rs/client)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
Updating crates.io index
Waiting on iota_stronghold to propagate to crates.io index (ctrl-c to wait asynchronously)
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
Updating crates.io index
\`

Assets 2
Loading

stronghold-runtime v1.0.2

16 Nov 13:57
@github-actions github-actions
stronghold-runtime-v1.0.2
c2dfa5f
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
stronghold-runtime v1.0.2

Updating crates.io index

Cargo Audit

\`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 469 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (217 crate dependencies)
\`

[1.0.2]

  • Disable frag module for android and ios targets.
    • 0a2331a9 Fix clippy and add covector changefile on 2022-11-14
    • 21fbdc68 Add changefiles on 2022-11-15
    • 4561e4a9 Merge changefiles on 2022-11-15

Cargo Publish

\`
Updating crates.io index
Packaging stronghold-runtime v1.0.2 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
Uploading stronghold-runtime v1.0.2 (/home/runner/work/stronghold.rs/stronghold.rs/engine/runtime)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
\`

Assets 2
Loading

stronghold-engine v1.0.2

16 Nov 13:59
@github-actions github-actions
stronghold-engine-v1.0.2
c2dfa5f
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
stronghold-engine v1.0.2

Updating crates.io index

Cargo Audit

\`
Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 469 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (217 crate dependencies)
\`

[1.0.2]

  • Disable frag module for android and ios targets.
    • 0a2331a9 Fix clippy and add covector changefile on 2022-11-14
    • 21fbdc68 Add changefiles on 2022-11-15
    • 4561e4a9 Merge changefiles on 2022-11-15

Cargo Publish

\`
Updating crates.io index
Packaging stronghold_engine v1.0.2 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
Uploading stronghold_engine v1.0.2 (/home/runner/work/stronghold.rs/stronghold.rs/engine)
warning: the following are not valid category slugs and were ignored: security. Please see https://crates.io/category_slugs for the list of all category slugs.
\`

Assets 2
Loading