ci: pin hyper-rustls for Rust 1.75 sync builds
What the developer wrote
Authored by Joost Jager
ci: pin hyper-rustls for Rust 1.75 sync builds
The build-sync job started resolving hyper-rustls v0.27.8 for the esplora-async-https configuration. That release requires rustc 1.85, but the sync CI job still runs on Rust 1.75.0.
Pin hyper-rustls to 0.27.7 when building with rustc older than 1.85, alongside the existing MSRV dependency pins in ci-tests-common.sh.
AI tools were used in preparing this commit.
What changed, and why it matters
This is a routine CI maintenance commit. It pins an older version of a dependency (hyper-rustls) so that automated builds using an older Rust compiler (1.75) continue to work. It does not change application code, fix a vulnerability, or alter how the software behaves in production.
No security action needed. Treat as normal CI/tooling maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit adds a conditional dependency pin in ci/ci-tests-common.sh: when the Rust compiler version is older than 1.85, hyper-rustls is held at 0.27.7 because 0.27.8 raised the MSRV to 1.85. This is purely a build/CI compatibility fix for the esplora-async-https configuration in the build-sync job.
Changed components
ci/ci-tests-common.shInspect captured patch +3 / −0
diff --git a/ci/ci-tests-common.sh b/ci/ci-tests-common.sh
index d60c9d0..9631689 100755
--- a/ci/ci-tests-common.sh
+++ b/ci/ci-tests-common.sh
@@ -20,4 +20,7 @@ PIN_RELEASE_DEPS # pin the release dependencies in our main workspace
# Starting with version 1.2.0, the `idna_adapter` crate has an MSRV of rustc 1.81.0.
[ "$RUSTC_MINOR_VERSION" -lt 81 ] && cargo update -p idna_adapter --precise "1.1.0" --quiet
+# Starting with version 0.27.8, the `hyper-rustls` crate has an MSRV of rustc 1.85.0.
+[ "$RUSTC_MINOR_VERSION" -lt 85 ] && cargo update -p hyper-rustls --precise "0.27.7" --quiet
+
export RUST_BACKTRACE=1
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.