de6aa06acf
Six phase commits landed for v0.6.2 (2b through 2g) plus three pre-release fixes from the final audit pass: - 2b: control-post flow (delete / visibility change) + retire BlobDeleteNotice - 2c: remove audience primitive + retire PostPush / PostNotification / AudienceRequest / AudienceResponse - 2d: profile posts signed by the posting identity - 2e: rich comments with ref_post_id + signed preview - 2f: groups as a distinct primitive alongside circles - 2g: GroupKeyDistribute → encrypted post (last persona-signed direct push gone) - audit fix: reject group-key distribution posts where the claimed admin doesn't match the post author - audit fix: cap concurrent port-scan hole punches at one (the 10 Mbps-on-VPN storm) - audit fix: dedup concurrent outgoing connects to the same peer Wire-breaking fork from v0.6.1. Retired message types 0x42 (PostNotification), 0x43 (PostPush), 0x44 (AudienceRequest), 0x45 (AudienceResponse), 0x95 (BlobDeleteNotice), 0xA0 (GroupKeyDistribute) are not optional. 121/121 core tests pass.
25 lines
755 B
TOML
25 lines
755 B
TOML
[package]
|
|
name = "itsgoin-core"
|
|
version = "0.6.2"
|
|
edition = "2021"
|
|
|
|
[dependencies]
|
|
iroh = { version = "0.96", features = ["address-lookup-mdns"] }
|
|
tokio = { version = "1", features = ["full"] }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
blake3 = "1"
|
|
rusqlite = { version = "0.32", features = ["bundled"] }
|
|
anyhow = "1"
|
|
tracing = "0.1"
|
|
hex = "0.4"
|
|
rand = "0.9"
|
|
curve25519-dalek = { version = "=5.0.0-pre.1", features = ["rand_core", "zeroize"] }
|
|
ed25519-dalek = { version = "=3.0.0-pre.1", features = ["rand_core", "zeroize"] }
|
|
chacha20poly1305 = "0.10"
|
|
base64 = "0.22"
|
|
zip = { version = "2", default-features = false, features = ["deflate"] }
|
|
igd-next = { version = "0.16", features = ["tokio"] }
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3"
|