Skip to content

ci: Automate dilithium version bump to dilithium-v3.0.0#87

Open
illuzen wants to merge 1 commit into
masterfrom
release/dilithium-v3.0.0
Open

ci: Automate dilithium version bump to dilithium-v3.0.0#87
illuzen wants to merge 1 commit into
masterfrom
release/dilithium-v3.0.0

Conversation

@illuzen

@illuzen illuzen commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

Automated dilithium version bump for release dilithium-v3.0.0.

https://github.com/Quantus-Network/qp-rusty-crystals/actions/runs/27128466146

Triggered by workflow run: major

Type:


Note

Medium Risk
Major semver bump on a post-quantum signature crate affects downstream consumers and Substrate wasm builds that depend on it, though the diff contains no cryptographic implementation changes.

Overview
Automated major release for qp-rusty-crystals-dilithium: crate and workspace dependency versions move from 2.5.0 to 3.0.0, with Cargo.lock refreshed for the new package version.

There are no Rust source changes—only manifest/lockfile updates tied to release tag dilithium-v3.0.0 (workflow-triggered major bump). The root workspace entry for the dilithium path dependency is updated to 3.0.0 (previously pinned with =2.5.0).

Reviewed by Cursor Bugbot for commit d85bec3. Configure here.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Comment @cursor review or bugbot run to trigger another review on this PR

Reviewed by Cursor Bugbot for commit d85bec3. Configure here.

Comment thread Cargo.toml
log = { version = "=0.4.29", default-features = false }
qp-poseidon-core = { version = "=2.1.0", default-features = false }
qp-rusty-crystals-dilithium = { path = "./dilithium", version = "=2.5.0", default-features = false }
qp-rusty-crystals-dilithium = { path = "./dilithium", version = "3.0.0", default-features = false }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dropped exact version pin

Low Severity

The workspace entry for qp-rusty-crystals-dilithium now uses version = "3.0.0" instead of an exact pin like the other workspace crates. In Cargo that reads as a compatible range, not a fixed version, so it no longer matches how qp-rusty-crystals-hdwallet and the rest of the workspace dependencies are constrained.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit d85bec3. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants