Skip to content

Conversation

@tarcieri
Copy link
Member

Changed

Notes

We've received a number of complaints about zeroize compatibility (see RustCrypto/utils#723), which was exacerbated by #884 which bumped the zeroize version within a minor version series.

I had hoped the cargo resolver would've been able to select an older compatible version of zeroize in these cases, but I've gotten a lot of reports that isn't happening.

This release reverts #884 in hopes of supporting a wider range of zeroize versions for now. It's technically breaking in the event anyone is actually depending on ZeroizeOnDrop marker traits on these types, but it seems we've already broken things for current users and that's the much higher impact issue.

We've received a number of complaints about `zeroize` compatibility
(see RustCrypto/utils#723), which was exacerbated by #884 which bumped
the `zeroize` version within a minor version series.

I had hoped the cargo resolver would've been able to select an older
compatible version of zeroize in these cases, but I've gotten a lot of
reports that isn't happening.

This release reverts #884 in hopes of supporting a wider range of
`zeroize` versions for now. It's technically breaking in the event
anyone is actually depending on `ZeroizeOnDrop` marker traits on these
types, but it seems we've already broken things for current users and
that's the much higher impact issue.
@tarcieri
Copy link
Member Author

cc @daxpedda

As it were, you originally warned about this being a breaking change on #884. Apparently I should've listened 😅

@tarcieri
Copy link
Member Author

Went ahead and released and tagged this branch.

It's unmergable, as master is already the v0.12 prerelease series. I'll open a separate PR to incorporate a changelog entry.

@tarcieri tarcieri closed this Jan 27, 2022
@tarcieri tarcieri deleted the elliptic-curve/v0.11.10 branch January 27, 2022 19:17
tarcieri added a commit that referenced this pull request Jan 27, 2022
The `master` branch is already the v0.12 prerelease series, however
another v0.11 release was cut in #923.

This adds a changelog entry, as well as "yanked" crate markers for
releases which depend on `zeroize` v1.5, which #923 downgrades.
tarcieri added a commit that referenced this pull request Jan 27, 2022
The `master` branch is already the v0.12 prerelease series, however
another v0.11 release was cut in #923.

This adds a changelog entry, as well as "yanked" crate markers for
releases which depend on `zeroize` v1.5, which #923 downgrades.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants