← Back to issue list

fix(build): upgrade rust for cryptography

View original Github issue

Metadata

Project
imagecraft
Number
#423
Type
pull request
State
merged
Author
lengau
Labels
—
Created
Updated
Closed

Current evaluation

Merged a build fix upgrading the Rust toolchain to resolve cryptography dependencies. Approved by a reviewer, all CI checks passed, and the change modified three files with a net reduction of seven lines.

Suggested action: —

No scores available.

Issue body

Describe your changes. --- - [ ] I've followed the [contribution guidelines](https://github.com/canonical/imagecraft/blob/main/CONTRIBUTING.md). - [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — — Merged a build fix upgrading the Rust toolchain to resolve cryptography dependencies. Approved by a reviewer, all CI checks passed, and the change modified three files with a net reduction of seven lines.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 15
Confidence: 90
needs review Upgrades Rust toolchain and dependencies to support modern cryptography libraries. Currently pending CI completion and maintainer review.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 15
Confidence: 90
needs review Upgrades Rust toolchain to resolve cryptography dependency requirements. Currently pending CI completion and maintainer review.

Update history

Date Change
updated
updated
created

Related issues

Issue Project State Summary Similarity
#1327 build: bump dependencies constrained by rustc version rockcraft merged Merged after two approvals. Bumps dependencies constrained by an older rustc version, resolving an OSV vulnerability in cryptography.
76%
#1061 build(deps): bump cryptography craft-application merged Merged a dependency update to bump cryptography, resolving an OSV security vulnerability. Approved by two reviewers and passing all CI checks, the change modified one file with 51 additions and 51 deletions.
76%
#4195 build(deps): bump cryptography from 40.0.2 to 41.0.0 snapcraft merged Dependabot dependency update to bump cryptography from 40.0.2 to 41.0.0 was approved, passed CI checks, and successfully merged. Reviewers confirmed Rust version compatibility across all target architectures.
75%
#6307 build(deps): bump cryptography snapcraft merged Merged after approval. Bumps the cryptography dependency to address a CVE. Core CI checks passed despite some integration and publish job failures.
72%
#1055 build(deps): bump cryptography craft-application merged Merged after bumping the cryptography dependency to resolve an OSV security vulnerability. Approved by two reviewers and passed all CI checks, including security scans and multi-platform tests.
72%
#619 setup, packaging: pin cryptography package and update dependencies charmcraft merged Merged. Pins the cryptography package and updates dependencies to prevent build failures on armhf, ppc64el, and s390x architectures by avoiding versions requiring a Rust compiler. Approved and passed CI checks.
72%
#235 fix(build): update rustc and cargo imagecraft merged Merged update to rustc and cargo dependencies to ensure maturin 1.10 compatibility. Approved by two reviewers, passed all CI checks, and modified one file.
72%
#1151 build(auto): bump cryptography craft-application merged Merged a PR by bepri that bumps the cryptography dependency to resolve an OSV. Approved by two reviewers and passing CI, the update addresses a security vulnerability.
71%
#6029 build(deps): bump cryptography from 46.0.3 to 46.0.5 snapcraft merged Merged a Dependabot update bumping cryptography from 46.0.3 to 46.0.5. The upgrade patches CVE-2026-26007, deprecates SECT* curves, and updates OpenSSL to 3.5.5. Approved by two reviewers and merged after passing CI checks.
71%
#418 build: bump cryptography for OSV craft-store merged Merged to bump the cryptography dependency and resolve an OSV vulnerability. Approved by a reviewer, passed CI checks, and modified two files.
70%