From 6bb12252f89a147abd443bcdd149d2fb2d27f41b Mon Sep 17 00:00:00 2001
From: kaczmarczyck <43844792+kaczmarczyck@users.noreply.github.com>
Date: Mon, 22 Aug 2022 15:53:50 +0200
Subject: [PATCH] Set bumpalo version for fuzzing (#532)

* maximum working bumpalo version

* explicit comment to explain version locking

* removes incorrect comment

* moves serde version lock to dev dependencies

* removes serde dependencies

* reverts serde removal in crypto library
---
 Cargo.toml      | 2 --
 fuzz/Cargo.toml | 5 +++--
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/Cargo.toml b/Cargo.toml
index b33cc1a..91e2211 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -20,8 +20,6 @@ persistent_store = { path = "libraries/persistent_store" }
 byteorder = { version = "1", default-features = false }
 arrayref = "0.3.6"
 subtle = { version = "2.2", default-features = false, features = ["nightly"] }
-# This import explicitly locks the version.
-serde_json = { version = "=1.0.69", default-features = false, features = ["alloc"] }
 embedded-time = "0.12.1"
 arbitrary = { version = "0.4.7", features = ["derive"], optional = true }
 rand = { version = "0.8.4", optional = true }
diff --git a/fuzz/Cargo.toml b/fuzz/Cargo.toml
index 0e88562..9d43c36 100644
--- a/fuzz/Cargo.toml
+++ b/fuzz/Cargo.toml
@@ -11,8 +11,9 @@ cargo-fuzz = true
 [dependencies]
 libfuzzer-sys = { version = "0.3" }
 fuzz_helper = { path = "fuzz_helper" }
-# This import explicitly locks the version.
-serde_json = { version = "=1.0.69" }
+# We import to explicitly lock the version.
+# Remove this dependency once CTAP is a library.
+bumpalo = "=3.8.0"
 
 # Prevent this from interfering with workspaces
 [workspace]