Skip to content

fix(deps): unify ic-crypto-utils-threshold-sig-der with other IC dependencies#473

Merged
lwshang merged 2 commits intomainfrom
lwshang/unify_ic_dependencies
Mar 2, 2026
Merged

fix(deps): unify ic-crypto-utils-threshold-sig-der with other IC dependencies#473
lwshang merged 2 commits intomainfrom
lwshang/unify_ic_dependencies

Conversation

@lwshang
Copy link
Contributor

@lwshang lwshang commented Mar 2, 2026

Move ic-crypto-utils-threshold-sig-der dependency declaration from ic-certification-testing/Cargo.toml to the workspace root Cargo.toml, aligning it with all other dfinity/ic crate dependencies on the same git rev (6f1ce3b). The crate was previously pinned to an older rev (724ae41), which pulled in a duplicate dependency tree including the outdated protobuf v2.28.0 (Dependabot alert #82). This ensures all IC monorepo crates stay in sync and eliminates the vulnerable protobuf dependency.

@lwshang lwshang marked this pull request as ready for review March 2, 2026 15:46
@lwshang lwshang requested a review from a team as a code owner March 2, 2026 15:46
@lwshang lwshang enabled auto-merge (squash) March 2, 2026 15:51
@lwshang lwshang merged commit e1a1b6c into main Mar 2, 2026
10 checks passed
@lwshang lwshang deleted the lwshang/unify_ic_dependencies branch March 2, 2026 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants