microsoft / microsoft/agent-governance-toolkit
chore(rust): upgrade ed25519-dalek 2.x -> 3.x and rand 0.8 -> 0.10
- Dominant language
- Python
- Stars
- 6.3k
- Forks
- 1.1k
- Avg merge
- 5d 11h
- Merged PRs (30d)
- 142
Description
Dependabot #3269 (ed25519-dalek 3.0.0) and #3271 (rand 0.10.2) both fail `build-rust` with real API breakage. Closed with `@dependabot ignore this major version`.
These need a dedicated PR with code changes:
- ed25519-dalek 2 -> 3: signature API rework (SigningKey/VerifyingKey split, Signature::from_bytes signature change)
- rand 0.8 -> 0.10: RngCore/CryptoRng trait relocations, thread_rng -> rng()
Affected: `agent-governance-rust/`
Contributor guide
Research direction
Start in agent-governance-rust/ by locating the ed25519-dalek and rand usages, then run build-rust to reproduce the current failures. Update the affected code for the SigningKey/VerifyingKey, Signature::from_bytes, RngCore/CryptoRng, and thread_rng changes. Done means both dependencies are upgraded and build-rust passes.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- cryptography, security
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100