Skip to content

Relax the blake3 cap to <2 at the requirement level - #3

Open
auser wants to merge 1 commit into
UOR-Foundation:mainfrom
auser:relax-blake3-pin
Open

auser wants to merge 1 commit into
UOR-Foundation:mainfrom
auser:relax-blake3-pin

Conversation

@auser

@auser auser commented Sep 30, 2026

Copy link
Copy Markdown

The workspace pins blake3 to >=1.5, <1.6 because 1.6+ pulls constant_time_eq 0.4, which needs edition 2024 / MSRV 1.85, and this workspace's MSRV is 1.83.

The cap is enforced transitively on every downstream consumer, though: Cargo will not hold two semver-compatible blake3 versions, so any consumer needing blake3 ^1.8 (hologram-live needs it for iroh 1.3) cannot resolve at all.

This change keeps the workspace's own lockfile on 1.5.x (MSRV 1.83 unaffected — cargo check -p uor-prism-crypto --locked passes) while relaxing the requirement so newer-toolchain consumers are not capped.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant