ci: Automate dilithium version bump to dilithium-v3.0.0#87
Conversation
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Comment @cursor review or bugbot run to trigger another review on this PR
Reviewed by Cursor Bugbot for commit d85bec3. Configure here.
| log = { version = "=0.4.29", default-features = false } | ||
| qp-poseidon-core = { version = "=2.1.0", default-features = false } | ||
| qp-rusty-crystals-dilithium = { path = "./dilithium", version = "=2.5.0", default-features = false } | ||
| qp-rusty-crystals-dilithium = { path = "./dilithium", version = "3.0.0", default-features = false } |
There was a problem hiding this comment.
Dropped exact version pin
Low Severity
The workspace entry for qp-rusty-crystals-dilithium now uses version = "3.0.0" instead of an exact pin like the other workspace crates. In Cargo that reads as a compatible range, not a fixed version, so it no longer matches how qp-rusty-crystals-hdwallet and the rest of the workspace dependencies are constrained.
Reviewed by Cursor Bugbot for commit d85bec3. Configure here.


Automated dilithium version bump for release dilithium-v3.0.0.
https://github.com/Quantus-Network/qp-rusty-crystals/actions/runs/27128466146
Triggered by workflow run: major
Type:
Note
Medium Risk
Major semver bump on a post-quantum signature crate affects downstream consumers and Substrate wasm builds that depend on it, though the diff contains no cryptographic implementation changes.
Overview
Automated major release for
qp-rusty-crystals-dilithium: crate and workspace dependency versions move from 2.5.0 to 3.0.0, withCargo.lockrefreshed for the new package version.There are no Rust source changes—only manifest/lockfile updates tied to release tag
dilithium-v3.0.0(workflow-triggered major bump). The root workspace entry for the dilithium path dependency is updated to3.0.0(previously pinned with=2.5.0).Reviewed by Cursor Bugbot for commit d85bec3. Configure here.