Sync main with upstream ZcashFoundation/frost by zhenlu · Pull Request #5 · lightsparkdev/frost

zhenlu · 2026-05-01T17:47:51Z

Summary

Fast-forwards main to upstream ZcashFoundation/frost@2016e44 (release 3.0.0 + follow-ups).
No fork-specific commits to preserve on main; this is a clean fast-forward.

Notable upstream changes included

Release 3.0.0 (#1041)
book: update to mdbook 0.5 (#1022)
core: add ZeroizeOnDrop for dkg::round2::Package (#1040)
feat(frost-core): add pre_commitment_aggregate hook to verify_signature_share() (#1016)
Numerous dependency bumps and CI updates.

Test plan

CI passes on this PR.
After merge, rebase nested-signing onto the new main.

…#846) Bumps [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) from 1.63.0 to 1.64.1. - [Release notes](https://github.com/reviewdog/action-actionlint/releases) - [Commits](reviewdog/action-actionlint@v1.63.0...v1.64.1) --- updated-dependencies: - dependency-name: reviewdog/action-actionlint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.1.2 to 5.2.0. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v5.1.2...v5.2.0) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Change to monthly schedule

* Update release-checklist.md * Update dkg.rs

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.2.0 to 5.3.1. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v5.2.0...v5.3.1) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update repairable.rs * Update refresh.rs * Update repairable.rs * Update lib.rs

* book: add FROST Server section * book: update Ywallet demo section * fill TODOs * Apply suggestions from code review Co-authored-by: natalie <n.l.eskinazi@gmail.com> * Apply suggestions from code review --------- Co-authored-by: natalie <n.l.eskinazi@gmail.com>

* update release checklist; misc cleanups * remove links to versions * add semver-checks; change numbered items to nonnumbered

…haringSharingCommitment` (#878) * feat(frost-core): add (de)serialization for `VerifiableSecretSharingSharingSharingCommitment` * Update frost-core/src/keys.rs Co-authored-by: Conrado Gouvea <conradoplg@gmail.com> * Update frost-core/src/keys.rs Co-authored-by: Conrado Gouvea <conradoplg@gmail.com> * add tests * fix doc --------- Co-authored-by: Conrado Gouvea <conradoplg@gmail.com>

* Update frost.md * Update SUMMARY.md * Update frost.md

* Modify DKG key generation test to include additional testing of all participant data * Fix wrong signing share * Fix wrong proof of knowledge and add missing data for participant 2,3 * Fix format

* Add post_generate to Ciphersuite trait * Add post_generate to Ciphersuite trait * Update keys.rs * Update keys.rs * Update keys.rs * make post_generate take a map of SecretShare * cargo fmt --------- Co-authored-by: Conrado Gouvea <conradoplg@gmail.com>

* Add CONTRIBUTING.md * Update link to point to #frost channel on discord

* refresh: validate min_signers * add std back so we can make a non-breaking release

…#885) Bumps [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) from 1.64.1 to 1.65.2. - [Release notes](https://github.com/reviewdog/action-actionlint/releases) - [Commits](reviewdog/action-actionlint@v1.64.1...v1.65.2) --- updated-dependencies: - dependency-name: reviewdog/action-actionlint dependency-version: 1.65.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ome places (#810) * feat(frost-core): simplify trait bounds, don't use the allocator in some places * use as_slice() * Copy -> Clone * fix build

* frost-rerandomized: change Randomizer generation to take SigningCommitments and not depend on serialization feature * ci: change doc warnings to errors * fix doc warnings * fix `one` variable naming

* Release 3.0.0 * Apply suggestions from code review Co-authored-by: natalie <n.l.eskinazi@gmail.com> * update frost-rerandomized changelog * use 3.0.0-rc.0 instead --------- Co-authored-by: natalie <n.l.eskinazi@gmail.com>

…expand (#989) * book, docs: mention channel requirements for DKG; remove redundancy; expand * Apply suggestions from code review Co-authored-by: natalie <n.l.eskinazi@gmail.com> * improve clarity * fix typo * Apply suggestions from code review Co-authored-by: natalie <n.l.eskinazi@gmail.com> * gencode --------- Co-authored-by: natalie <n.l.eskinazi@gmail.com>

* Clippy fixes * fix cargo package warnings --------- Co-authored-by: Conrado Gouvea <conradoplg@gmail.com>

…ure_share()` (#1016) feat(frost-core): add pre_commitment_aggregate hook to verify_signature_share

* core: misc fixes * core: remove Copy from SigningKey; add ZeroizeOnDrop * cargo fmt

Bumps [keccak](https://github.com/RustCrypto/sponges) from 0.1.5 to 0.1.6. - [Commits](RustCrypto/sponges@keccak-v0.1.5...keccak-v0.1.6) --- updated-dependencies: - dependency-name: keccak dependency-version: 0.1.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 3 to 4. - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@v3...v4) --- updated-dependencies: - dependency-name: actions/upload-pages-artifact dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [regex](https://github.com/rust-lang/regex) from 1.12.2 to 1.12.3. - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.2...1.12.3) --- updated-dependencies: - dependency-name: regex dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.2 to 6.0.0. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v5.5.2...v6.0.0) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1044) Bumps [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) from 1.69.1 to 1.72.0. - [Release notes](https://github.com/reviewdog/action-actionlint/releases) - [Commits](reviewdog/action-actionlint@v1.69.1...v1.72.0) --- updated-dependencies: - dependency-name: reviewdog/action-actionlint dependency-version: 1.72.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) from 6 to 7. - [Release notes](https://github.com/release-drafter/release-drafter/releases) - [Commits](release-drafter/release-drafter@v6...v7) --- updated-dependencies: - dependency-name: release-drafter/release-drafter dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [insta](https://github.com/mitsuhiko/insta) from 1.46.1 to 1.47.2. - [Release notes](https://github.com/mitsuhiko/insta/releases) - [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md) - [Commits](mitsuhiko/insta@1.46.1...1.47.2) --- updated-dependencies: - dependency-name: insta dependency-version: 1.47.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4 to 5. - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@v4...v5) --- updated-dependencies: - dependency-name: actions/deploy-pages dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [proptest](https://github.com/proptest-rs/proptest) from 1.9.0 to 1.11.0. - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md) - [Commits](proptest-rs/proptest@v1.9.0...v1.11.0) --- updated-dependencies: - dependency-name: proptest dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.49.0 to 1.50.0. - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* book: update to mdbook 0.5 * Fix typo in book/src/tutorial.md (#1022) --------- Co-authored-by: natalie <n.l.eskinazi@gmail.com>

* bump to 3.0.0 * fixes from Claude review

Add explicit release-drafter permissions (#1060)

dependabot Bot and others added 30 commits January 24, 2025 00:58

Update dependabot.yml (#856)

1f8e0e9

Change to monthly schedule

fix errors (#858)

121a116

* Update release-checklist.md * Update dkg.rs

Fixing a small typo (#863)

1d41c21

docs: correction comments (#860)

602157a

* Update repairable.rs * Update refresh.rs * Update repairable.rs * Update lib.rs

Fix typo (#866)

4d3d882

all: use OsRng instead of thread_rng() (#861)

543e6f4

update release checklist; misc cleanups (#843)

f862ef1

* update release checklist; misc cleanups * remove links to versions * add semver-checks; change numbered items to nonnumbered

chore(ci): update some github action dependencies (#873)

64a4be6

chore(deps): improve organization of workspace (root Cargo.toml) (#874)

fc87f59

docs: Add network topologies section with diagrams (#883)

2a6673f

* Update frost.md * Update SUMMARY.md * Update frost.md

Add tests for all test vectors in DKG (#875)

ca1c98c

* Modify DKG key generation test to include additional testing of all participant data * Fix wrong signing share * Fix wrong proof of knowledge and add missing data for participant 2,3 * Fix format

docs: add warning about encrypted channel for DKG (#888)

d7cd2a2

clippy fixes (#889)

a8c8b6d

chore(frost-core): import String from alloc (#899)

78c70b4

feat: bump MSRV to Rust 1.73 (#900)

412f049

feat: bump MSRV to Rust 1.81 (#901)

4378727

Add CONTRIBUTING.md (#902)

6ff59d1

* Add CONTRIBUTING.md * Update link to point to #frost channel on discord

Remove reference to private repo (#905)

9956559

core: remove unused error (#909)

f62ee73

refresh: validate min_signers (#908)

379ef68

* refresh: validate min_signers * add std back so we can make a non-breaking release

bump to 2.2.0 (#914)

3ffc19d

core: add aggregate_custom (#911)

6034316

feat(frost-core): simplify trait bounds, don't use the allocator in s…

e0d2176

…ome places (#810) * feat(frost-core): simplify trait bounds, don't use the allocator in some places * use as_slice() * Copy -> Clone * fix build

conradoplg and others added 27 commits January 23, 2026 14:33

frost-rerandomized: change Randomizer generation (#762)

bac3297

* frost-rerandomized: change Randomizer generation to take SigningCommitments and not depend on serialization feature * ci: change doc warnings to errors * fix doc warnings * fix `one` variable naming

core: simplify compute_refreshing_shares() (#940)

3ed40ad

use partX() for repair share functions (#1001)

8f97498

reexport rerandomized API in ciphersuite crates (#998)

68b1f57

change PublicKeyPackage::new() to take min_signers as an Option (#1000)

ee89da3

Release 3.0.0 (#995)

893afc7

* Release 3.0.0 * Apply suggestions from code review Co-authored-by: natalie <n.l.eskinazi@gmail.com> * update frost-rerandomized changelog * use 3.0.0-rc.0 instead --------- Co-authored-by: natalie <n.l.eskinazi@gmail.com>

Clippy fixes (#1006)

3fa76ef

* Clippy fixes * fix cargo package warnings --------- Co-authored-by: Conrado Gouvea <conradoplg@gmail.com>

fix issues from specific feature combinations (#1008)

8315231

actually remove the std feature (#1010)

6e2ed05

feat(frost-core): add pre_commitment_aggregate hook to `verify_signat…

1399dc0

…ure_share()` (#1016) feat(frost-core): add pre_commitment_aggregate hook to verify_signature_share

ci: migrate book to GitHub pages (#1020)

f7954c3

core: misc fixes (#1042)

ff5ec8d

* core: misc fixes * core: remove Copy from SigningKey; add ZeroizeOnDrop * cargo fmt

core: add ZeroizeOnDrop for dkg::round2::Package (#1040)

7dcfd30

book: update to mdbook 0.5 (#1022)

4705e79

* book: update to mdbook 0.5 * Fix typo in book/src/tutorial.md (#1022) --------- Co-authored-by: natalie <n.l.eskinazi@gmail.com>

Release 3.0.0 (#1041)

1aef3fb

* bump to 3.0.0 * fixes from Claude review

Add explicit release-drafter permissions (#1061)

2016e44

Add explicit release-drafter permissions (#1060)

mhrheaume merged commit 2016e44 into main May 4, 2026
18 checks passed

mhrheaume deleted the sync-upstream-2026-05-01 branch May 4, 2026 18:25

mhrheaume had a problem deploying to github-pages May 4, 2026 18:27 — with GitHub Actions Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Sync main with upstream ZcashFoundation/frost#5

Sync main with upstream ZcashFoundation/frost#5
mhrheaume merged 86 commits intomainfrom
sync-upstream-2026-05-01

zhenlu commented May 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

14 participants

Conversation

zhenlu commented May 1, 2026

Summary

Notable upstream changes included

Test plan

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

14 participants