chore(rust/trezor-thp): use trezor-noise-protocol from crates.io instead of git
What the developer wrote
Authored by Martin Milata
chore(rust/trezor-thp): use trezor-noise-protocol from crates.io instead of git
What changed, and why it matters
This is a routine dependency housekeeping change. The project switched from loading a small cryptography helper library directly from a Git repository to using the published version on crates.io, and bumped the version from 0.2.0 to 0.2.1. There is no code behavior change visible in this commit and no security issue is indicated.
No security action required. Treat as normal maintenance. If desired, verify that crates.io version 0.2.1 matches the previously pinned git revision.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates rust/trezor-thp/Cargo.toml to replace two git-based dependencies on trezor/noise-rust (pinned to rev 1bb08dfdfc11160b760b8d28c09677ed72fb1fff) with crates.io version 0.2.1 of the same crate. This is a supply-chain/source-location change, not a functional patch. The diff contains no Rust code changes.
Changed components
rust/trezor-thp/Cargo.tomlInspect captured patch +1 / −5
diff --git a/rust/trezor-thp/Cargo.toml b/rust/trezor-thp/Cargo.toml
index cd6c12d8..a2e84e74 100644
--- a/rust/trezor-thp/Cargo.toml
+++ b/rust/trezor-thp/Cargo.toml
@@ -14,10 +14,8 @@ version = "0.9.2"
default-features = false
[dependencies.trezor-noise-protocol]
-version = "0.2.0"
+version = "0.2.1"
default-features = false
-git = "https://github.com/trezor/noise-rust"
-rev = "1bb08dfdfc11160b760b8d28c09677ed72fb1fff"
[dev-dependencies]
env_logger = "0.11.8"
@@ -36,5 +34,3 @@ path = "."
version = "0.6.2"
default-features = false
features = ["use-x25519", "use-aes-256-gcm", "use-sha2"]
-git = "https://github.com/trezor/noise-rust"
-rev = "1bb08dfdfc11160b760b8d28c09677ed72fb1fff"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.