1f31cf0342
What #443 left that has a fix on its own line: - joule-code-collab's MLS keying test moves to openmls 0.9.1, matching joule-moq-mls. The old openmls 0.6 dev-dependencies were the only path to hpke-rs 0.2.0 and hpke-rs-rust-crypto 0.2.0 (RUSTSEC-2026-0069 to 0072), so both leave the lockfile. export_secret now takes the crypto provider. - smart-byte-rs: h2 0.4.14 -> 0.4.20 (RUSTSEC-2026-0258). After this, every advisory left in the workspaces needs a major-version move or an upstream release: zip < 9, pyo3 0.28, h2 0.3 (via hf-hub), hickory-proto 0.25 (via libp2p-mdns), quick-xml 0.37/0.39 (via open-payments-iso20022 and plist), libcrux-kem 0.0.9 (via hpke-rs-libcrux 0.7), rkyv 0.7 and rsa (no fix). Co-Authored-By: Claude Opus 5.5 <[email protected]>
23 lines
859 B
TOML
23 lines
859 B
TOML
[package]
|
|
name = "joule-code-collab"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
repository.workspace = true
|
|
rust-version.workspace = true
|
|
description = "Joule Code — federated collaboration interface + single-node reference cluster (SPEC §7, spec/collab.md). Research: the API and the ordered/deduped/signature-checked log shape; full BFT/MLS/FROST/CommunicationOS federation is future work."
|
|
|
|
[dependencies]
|
|
joule-code-schema.workspace = true
|
|
joule-code-cargo.workspace = true
|
|
thiserror.workspace = true
|
|
frost-ed25519 = "2"
|
|
|
|
[dev-dependencies]
|
|
ed25519-dalek.workspace = true
|
|
rand = "0.8"
|
|
# MLS group keying (RFC 9420) for the collaborating set — demonstrated in
|
|
# tests/mls_keying.rs. Dev-dep so the library's runtime deps stay light.
|
|
openmls = "=0.9.1"
|
|
openmls_rust_crypto = "=0.6.0"
|
|
openmls_basic_credential = "=0.6.0"
|