Dependency Upgrade - curve25519-dalek

[omkarshanbhag]

Problem

solana-program currently uses curve curve25519-dalek v3.2.1. It's dependencies list specifies zeroize >=1, <1.4 which is pretty old and restrictive -- causes sub-dependency versions to not have overlap in crates that already depend on zeroize, among others.

Proposed Solution

Upgrade to the latest version of curve25519-dalek v4.1.3 which is must more permissive as the version of zeroize required is just ^1

[steviez]

Hi @omkarshanbhag - this is already on our radar; we had updated but then had to back that change out. Given that is a known issue that is already being worked on, I'm going to close this issue but feel free to subscribe to #2252 to follow along