Commit Graph

17 Commits

Author SHA1 Message Date
Kris Nuttycombe df32629352 Update audit metadata for `zcash_client_backend` 2024-08-20 08:56:25 -06:00
Kris Nuttycombe 49c623bc15 Record audit of zip321 version 0.1.0 2024-08-19 19:52:17 -06:00
Kris Nuttycombe 1acf583738 Record audit for zcash_keys 0.2.0 -> 0.3.0 2024-08-19 19:30:35 -06:00
Kris Nuttycombe 9022bf6aa4 Audit zcash_proofs 0.15.0 -> 0.16.0 2024-08-19 19:22:59 -06:00
Kris Nuttycombe 3f8af7fcee Audit zcash_primitives 0.15.1 -> 0.16.0 2024-08-19 18:59:24 -06:00
Kris Nuttycombe e6663e5d0a Update `cargo vet` for zcash_address-0.4.0 release 2024-08-19 18:40:40 -06:00
Kris Nuttycombe 0e803a73c9 release zcash_address version 0.4.0 2024-08-19 16:24:03 -06:00
Kris Nuttycombe 12752cbcd6 zcash_primitivies: Update zcash-specific dependencies.
* sapling-crypto 0.2
* orchard 0.9
* incrementalmerketree 0.6
* shardtree 0.4
2024-08-13 16:58:58 -06:00
Jack Grigg 37f41f4b06 cargo update 2024-07-19 03:51:52 +00:00
Jack Grigg e5517b61cc zcash_client_backend: Migrate to `tonic 0.12` with `http 1` 2024-07-11 22:23:55 +00:00
Jack Grigg f54ee4abde Migrate from `hdwallet` to `bip32`
As part of this, we migrate to `secp256k1 0.27`. This version does not
bump `secp256k1-sys`, so remains compatible with the `libsecp256k1`
revision used in `zcashd`.

The `zcash_primitives::legacy::keys::AccountPrivKey` encoding also
changes to preserve the transparent extended key metadata. Previously
the type was documented as such, but only encoded the private key and
chain code; the new encoding now matches the documentation. As a side
effect, the unstable encoding of `zcash_keys::keys::UnifiedSpendingKey`
also changes.

Closes zcash/librustzcash#1407.
Closes zcash/librustzcash#1408.
2024-06-15 00:04:37 +00:00
Daira-Emma Hopwood cfc1cb3738 Add and prune audits.
Signed-off-by: Daira-Emma Hopwood <daira@jacaranda.org>
2024-06-04 12:19:40 +01:00
Daira-Emma Hopwood 39a6b2b4f8 Add audits and bump some exemptions.
Signed-off-by: Daira-Emma Hopwood <daira@jacaranda.org>
2024-05-20 13:35:27 +01:00
Jack Grigg 4eb2df6714 Trust the Windows crates published by Microsoft
As with our `cargo-vet` usage in `zcash/zcash`, these are binary crates
for interacting with Windows APIs, so both sides are maintained by
Microsoft and are not something we can audit ourselves.
2024-04-23 00:08:48 +00:00
Jack Grigg f3717d9427 Trust the Zcash crates we maintain and publish
Trust set imported from `zcash/zcash` where there were common deps.
2024-04-23 00:08:48 +00:00
Jack Grigg afb8b55ed8 Import cargo-vet criteria from `zcash/zcash` 2024-04-22 23:37:02 +00:00
Jack Grigg 672cc9f080 cargo vet init 2024-04-22 23:31:40 +00:00