Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Could you please update zeroize dependency to the newer version? #692

Closed
goni098 opened this issue Aug 25, 2024 · 1 comment
Closed

Could you please update zeroize dependency to the newer version? #692

goni098 opened this issue Aug 25, 2024 · 1 comment

Comments

@goni098
Copy link

goni098 commented Aug 25, 2024

I am facing with issue Cargo can not select the version for zeroize.

error: failed to select a version for `zeroize`.
    ... required by package `curve25519-dalek v3.2.1`
    ... which satisfies dependency `curve25519-dalek = "^3.2.1"` of package `solana-perf v2.0.7`
    ... which satisfies dependency `solana-perf = "=2.0.7"` of package `solana-streamer v2.0.7`
    ... which satisfies dependency `solana-streamer = "=2.0.7"` of package `solana-client v2.0.7`
    ... which satisfies dependency `solana-client = "^2.0.7"` of package `scanner v0.1.0 (...)`
versions that meet the requirements `>=1, <1.4` are: 1.3.0, 1.2.0, 1.1.1, 1.1.0, 1.0.0

all possible versions conflict with previously selected packages.

  previously selected package `zeroize v1.5.3`
    ... which satisfies dependency `zeroize = "^1.5"` of package `rsa v0.9.0`
    ... which satisfies dependency `rsa = "^0.9"` of package `sqlx-mysql v0.7.0`
    ... which satisfies dependency `sqlx-mysql = "=0.7.0"` of package `sqlx v0.7.0`
    ... which satisfies dependency `sqlx = "^0.7"` of package `sea-orm v1.0.0`
    ... which satisfies dependency `sea-orm = "^1.0.0"` of package `database v0.1.0 (...)`
    ... which satisfies path dependency `database` (locked to 0.1.0) of package `http-server v0.1.0 (...)`

failed to select a version for `zeroize` which could resolve this conflict
@goni098 goni098 changed the title Could you please update zeroize dependency to the new version? Could you please update zeroize dependency to the newer version? Aug 25, 2024
@tarcieri
Copy link
Contributor

The latest version of curve25519-dalek (v4) does not have this problem. The problem is Solana is using an obsolete version of curve25519-dalek.

Here is the PR you need to watch for a Solana-side update: anza-xyz/agave#2252

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants