Skip to content

Commit

Permalink
chore: sha2 as dev dependency (#3378)
Browse files Browse the repository at this point in the history

Description
---
Move sha2 to dev dependencies

Motivation and Context
---
While looking at a [sha2 RUSTSEC advisory](https://rustsec.org/advisories/RUSTSEC-2021-0100.html)
(does not apply to Tari) noticed that sha2 is only used in tests so
should not be a dependency

How Has This Been Tested?
---
Existing tests
  • Loading branch information
sdbondi committed Sep 22, 2021
1 parent d676bba commit dd23808
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 3 deletions.
4 changes: 2 additions & 2 deletions Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 3 additions & 1 deletion base_layer/key_manager/Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -11,11 +11,13 @@ edition = "2018"
tari_crypto = "0.11.1"
rand = "0.8"
digest = "0.9.0"
sha2 = "0.9.5"
serde = "1.0.89"
serde_derive = "1.0.89"
serde_json = "1.0.39"
thiserror = "1.0.26"

[dev-dependencies]
sha2 = "0.9.8"

[features]
avx2 = ["tari_crypto/avx2"]

0 comments on commit dd23808

Please sign in to comment.