signstar/Cargo.toml at main · archlinux/signstar · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
[workspace]
members = [
    "nethsm",
    "nethsm-backup",
    "nethsm-cli",
    "nethsm-config",
    "signstar-common",
    "signstar-config",
    "signstar-configure-build",
    "signstar-crypto",
    "signstar-request-signature",
    "signstar-sign",
    "signstar-yubihsm2",
]
resolver = "3"

[workspace.dependencies]
base64ct = { version = "1.6.0", features = ["alloc", "std"] }
change-user-run = "0.1.1"
chrono = "0.4.38"
clap = { version = "4.5.23", features = ["derive", "env"] }
clap-verbosity-flag = "3.0.3"
confy = "2.0.0"
ed25519-dalek = "2.1.1"
log = { version = "0.4.27", features = ["kv_std"] }
nethsm = { path = "nethsm", version = "0.10.0" }
nethsm-backup = { path = "nethsm-backup", version = "0.2.0" }
nethsm-config = { path = "nethsm-config", version = "0.5.0" }
nethsm-sdk-rs = "1.1.1"
nix = { version = "0.31.0", features = ["user"] }
num_enum = "0.7.6"
p256 = "0.13.2"
p384 = "0.13.1"
p521 = "0.13.3"
pgp = { version = "0.19", default-features = false }
rand = "0.8.5"
rsa = "0.9.7"
# Upgrading rstest may mean the lint suppression in `nethsm/src/test.rs` could be removed
rstest = "0.26.0"
rustainers = "0.15"
serde = { version = "1.0.215", features = ["derive"] }
serde_json = "1.0.145"
sha1 = "0.11.0"
# Updating this dependency directly here is breaking change in signstar-request-signature.
# To do it in a non-breaking way the library needs to support the old version too.
# Cargo.toml allows using two incompatible versions of the library:
# old_sha2 = { package = "sha2", version = "=0.11.0-pre.1" }
# Then adjust the tests in signstar-request-signature/src/lib.rs to additionally test
# inputs that reference the "old_sha2".
sha2 = "=0.11.0"
signstar-common = { path = "signstar-common", version = "0.1.2" }
signstar-config = { path = "signstar-config", version = "0.2.0" }
signstar-crypto = { path = "signstar-crypto", version = "0.1.0" }
signstar-request-signature = { path = "signstar-request-signature", version = "0.1.3" }
simplelog = "0.12.2"
strum = { version = "0.28.0", features = ["derive"] }
tempfile = "3.24.0"
testdir = "0.10.0"
testresult = "0.4.1"
thiserror = "2.0.4"
tokio = { version = "1.42.0", features = ["macros"] }
ureq = "2.12.1"
uuid = { version = "1.11.0", features = ["v7"] }
zeroize = { version = "1.8.1", features = ["serde", "zeroize_derive"] }

[workspace.lints.rust]
missing_debug_implementations = "deny"
missing_docs = "deny"

[workspace.package]
authors = [
    "David Runge <dvzrv@archlinux.org>",
    "Wiktor Kwapisiewicz <wiktor@archlinux.org>",
]
edition = "2024"
homepage = "https://gitlab.archlinux.org/archlinux/signstar"
license = "Apache-2.0 OR MIT"
repository = "https://gitlab.archlinux.org/archlinux/signstar"
rust-version = "1.93.1"

[profile.release]
codegen-units = 1
lto = true
opt-level = "z"

# Enable optimizations for crates that are extremely slow unoptimized
# scrypt opt-level provides 30x increase of performance, while aes-gcm 2x
[profile.dev.package.scrypt]
opt-level = 3

[profile.dev.package.aes-gcm]
opt-level = 3