Support latest tls (2.3.0) and crypton (1.1.0)#69
Merged
jappeace merged 8 commits intowinterland1989:masterfrom Mar 7, 2026
Merged
Support latest tls (2.3.0) and crypton (1.1.0)#69jappeace merged 8 commits intowinterland1989:masterfrom
jappeace merged 8 commits intowinterland1989:masterfrom
Conversation
- tls: allow 1.9.x through 2.3.x (was capped at <1.9) - crypton: allow 1.x (was capped at <0.40) - base: allow up to <4.22 (was capped at <4.19) tls 2.x removed Default instances for ServerParams, Shared, Supported, and ValidationCache. Use CPP to select between def (tls <2) and the new named defaults like defaultParamsServer, defaultShared, defaultSupported, defaultValidationCache (tls >=2). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
crypton 1.1.0 replaced the memory package with ram for ByteArrayAccess. Use CPP + PackageImports to import Data.ByteArray from the correct package depending on the crypton version. Also bump crypton bound to include ^>=1.1.0 and add ram as dependency. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Update nixpkgs to March 2026 - Remove hardcoded tls 1.7.1 override (no longer needed) - Add ram package override (not yet in nixpkgs) - Bump data-default-class bound to allow 0.2.x Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
haskell/actions/setup is deprecated and doesn't support GHC 9.12. Switch to haskell-actions/setup@v2 and bump checkout/cache to v4. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Combine nix.yaml and cabal.yaml into a single ci.yaml so that a failure in either the nix or cabal jobs cancels the whole workflow run via `gh run cancel`. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add permissions: actions: write for workflow cancellation - Add continue-on-error on cancel step (fork PRs lack permissions) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
jappeace-sloth
force-pushed
the
fix-tls-crypton-bounds
branch
from
d94225e to
c0bd4bd
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
tlsbounds to support up to 2.3.xcryptonbounds to include^>=1.1.0Data.TLSSettingfor tls 2.x (removedDefaultinstances, use CPP shims)Database.MySQL.Connectionfor crypton 1.1.0 (memory→rammigration, usePackageImports)baseto<4.22for GHC 9.12data-default-classto allow 0.2.xramdependency (needed alongsidememoryfor crypton 1.1.0)ramoverride, remove stale tls 1.7.1 pinhaskell-actions/setup@v2Test plan
🤖 Generated with Claude Code