Update version/edition

Author: Keats

.github/workflows/ci.yml

@@ -7,23 +7,23 @@ on:
 jobs:
   test:
     name: test
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-latest
     strategy:
       matrix:
-        rust: [1.56.0, stable]
+        rust: [1.57.0, stable]
 
         include:
-          - rust: 1.56.0
+          - rust: 1.57.0
             test_no_std: false
-          - rust: 1.56.0
+          - rust: 1.57.0
             test_no_std: true
           - rust: stable
             test_no_std: true
       fail-fast: false
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     - name: Install Rust
       uses: actions-rs/toolchain@v1
@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@master
+        uses: actions/checkout@v3
 
       - uses: actions-rs/toolchain@v1
         with:
@@ -64,13 +64,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@master
+        uses: actions/checkout@v3
 
       - uses: actions-rs/toolchain@v1
         with:
-          profile: minimal
-          toolchain: stable
+          toolchain: 1.57.0
           override: true
+          components: clippy
 
       - uses: actions-rs/cargo@v1
         with:

Cargo.toml

@@ -1,14 +1,14 @@
 [package]
 name = "bcrypt"
-version = "0.13.0"
+version = "0.14.0"
 authors = ["Vincent Prouillet <hello@prouilletvincent.com>"]
 license = "MIT"
 readme = "README.md"
 description = "Easily hash and verify passwords using bcrypt"
 homepage = "https://github.com/Keats/rust-bcrypt"
 repository = "https://github.com/Keats/rust-bcrypt"
 keywords = ["bcrypt", "password", "web", "hash"]
-edition = "2018"
+edition = "2021"
 include = ["src/**/*", "LICENSE", "README.md"]
 
 [features]

README.md

@@ -8,10 +8,10 @@
 Add the following to Cargo.toml:
 
 ```toml
-bcrypt = "0.13"
+bcrypt = "0.14"
 ```
 
-The minimum Rust version is 1.56.0.
+The minimum Rust version is 1.57.0.
 
 ## Usage
 The crate makes 3 things public: `DEFAULT_COST`, `hash`, `verify`.
@@ -48,6 +48,7 @@ for new projects.
 
 ## Changelog
 
+* 0.14.0: use `subtle` crate for constant time comparison, update base64 and bump to 2021 edition
 * 0.13.0: make zeroize dep opt-out and use fixed salt length
 * 0.12.1: zero vec containing password in the hashing function before returning the hash
 * 0.12.0: allow null bytes in password

src/lib.rs

@@ -194,7 +194,6 @@ pub fn hash_with_salt<P: AsRef<[u8]>>(
 /// Verify that a password is equivalent to the hash provided
 #[cfg(any(feature = "alloc", feature = "std"))]
 pub fn verify<P: AsRef<[u8]>>(password: P, hash: &str) -> BcryptResult<bool> {
-    use core::convert::TryInto;
     use subtle::ConstantTimeEq;
 
     let parts = split_hash(hash)?;