From 487d99f5ea328fd5fdb32b6193ccabb8e514a03f Mon Sep 17 00:00:00 2001 From: Jens Petersen Date: Mon, 29 Jun 2026 16:47:34 +0800 Subject: [PATCH 1/2] allow http-client-tls-0.4, crypton-x509*-1.9, tls-2.2+, jose-1.3 Closes: #7929 #7966 #8033 --- build-constraints.yaml | 36 +++++------------------------------- 1 file changed, 5 insertions(+), 31 deletions(-) diff --git a/build-constraints.yaml b/build-constraints.yaml index 9f0d6fe3..1e4f4aca 100644 --- a/build-constraints.yaml +++ b/build-constraints.yaml @@ -5685,6 +5685,7 @@ packages: - minisat - minisat-solver - missing-foreign + - mlkem - mmap - mmorph - mockery @@ -7773,27 +7774,6 @@ packages: - base-compat < 0.15.0 - base-compat-batteries < 0.15.0 - # https://github.com/commercialhaskell/stackage/issues/7929 - - crypto-token < 0.2.0 - - crypton < 1.1.0 - - crypton-conduit < 0.3.0 - - crypton-connection < 0.4.6 - - crypton-x509 < 1.8.0 - - crypton-x509-store < 1.8.0 - - crypton-x509-system < 1.8.0 - - crypton-x509-validation < 1.8.0 - - hpke < 0.1.0 - - http3 < 0.1.3 - - quic < 0.2.22 - - tls < 2.2.0 - - tls-session-manager < 0.1.0 - - smtp-mail < 0.5.0.1 - - pusher-http-haskell < 2.1.0.22 - - wreq < 0.5.4.5 - - password < 3.1.1 - - mime-mail-ses < 0.4.5 - - hash-tree < 0.1.0 - # https://github.com/commercialhaskell/stackage/issues/7930 - happy < 2.2 - happy-lib < 2.2 @@ -7829,19 +7809,12 @@ packages: # https://github.com/commercialhaskell/stackage/issues/8018 - text-iso8601 < 0.2 - # https://github.com/commercialhaskell/stackage/issues/8033 - - jose < 0.13 - # https://github.com/commercialhaskell/stackage/issues/8037 - magic < 1.2 # https://github.com/commercialhaskell/stackage/issues/8049 - apecs < 0.10 - # https://github.com/commercialhaskell/stackage/issues/7966 - - http-client-tls < 0.4 - - aws < 0.25.3 - # https://github.com/commercialhaskell/stackage/issues/8058 - hackage-revdeps < 0.4 # end of Stackage upper bounds @@ -7871,6 +7844,10 @@ package-flags: curl: new-base: true + # https://github.com/dhall-lang/dhall-haskell/issues/2748 + dhall: + use-http-client-tls: false + hpio: test-hlint: false @@ -7969,9 +7946,6 @@ package-flags: path: os-string: true - # https://github.com/commercialhaskell/stackage/issues/7929 - mysql-haskell: - crypton-1-1: false # end of package-flags # Special configure options for individual packages From 864eb071edf642991818fd160dee3f05afb6aeae Mon Sep 17 00:00:00 2001 From: Jens Petersen Date: Mon, 29 Jun 2026 17:02:16 +0800 Subject: [PATCH 2/2] disable packages impacted by http-client-tls, crypton, jose bumps --- build-constraints.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/build-constraints.yaml b/build-constraints.yaml index 1e4f4aca..80bd385d 100644 --- a/build-constraints.yaml +++ b/build-constraints.yaml @@ -6815,6 +6815,7 @@ packages: - fib < 0 # tried fib-0.1.0.1, but its *library* requires the disabled package: base-noprelude - fields-and-cases < 0 # tried fields-and-cases-0.2.0.0, but its *library* requires base >=4.17.2.0 && < 4.20 and the snapshot contains base-4.21.2.0 - fin < 0 # tried fin-0.3.2, but its *library* requires QuickCheck ^>=2.14.2 || ^>=2.15 || ^>=2.18.0.0 and the snapshot contains QuickCheck-2.16.0.0 + - firebase-hs < 0 # tried firebase-hs-0.2.0.0, but its *library* requires http-client-tls >=0.3 && < 0.4 and the snapshot contains http-client-tls-0.4.0 - first-class-patterns < 0 # tried first-class-patterns-0.3.2.5, but its *library* requires transformers >=0.1.0 && < 0.6 and the snapshot contains transformers-0.6.3.0 - flat-mcmc < 0 # tried flat-mcmc-1.5.2, but its *library* requires text >=1.2 && < 2 and the snapshot contains text-2.1.4 - flat-mcmc < 0 # tried flat-mcmc-1.5.2, but its *library* requires transformers >=0.2 && < 0.6 and the snapshot contains transformers-0.6.3.0 @@ -6852,12 +6853,16 @@ packages: - git < 0 # tried git-0.3.0, but its *library* requires bytestring >=0.9 && < 0.11 and the snapshot contains bytestring-0.12.2.0 - git < 0 # tried git-0.3.0, but its *library* requires the disabled package: cryptonite - github-webhooks < 0 # tried github-webhooks-0.18.0, but its *library* requires the disabled package: cryptonite + - gitit < 0 # tried gitit-0.16, but its *library* requires the disabled package: hoauth2 - glaze < 0 # tried glaze-0.3.0.1, but its *library* requires lens >=4 && < 5 and the snapshot contains lens-5.3.6 - gloss-examples < 0 # tried gloss-examples-1.13.0.4, but its *executable* requires bytestring >=0.10 && < 0.12 and the snapshot contains bytestring-0.12.2.0 - gloss-examples < 0 # tried gloss-examples-1.13.0.4, but its *executable* requires containers >=0.5 && < 0.7 and the snapshot contains containers-0.7 - gloss-examples < 0 # tried gloss-examples-1.13.0.4, but its *executable* requires random >=1.2 && < 1.3 and the snapshot contains random-1.3.1 - gloss-examples < 0 # tried gloss-examples-1.13.0.4, but its *executable* requires vector >=0.11 && < 0.13 and the snapshot contains vector-0.13.2.0 - gloss-raster < 0 # tried gloss-raster-1.13.1.2, but its *library* requires containers >=0.5 && < 0.7 and the snapshot contains containers-0.7 + - gogol < 0 # tried gogol-1.0.0.0, but its *library* requires crypton >=0.34 && < 1.1 and the snapshot contains crypton-1.1.4 + - gogol < 0 # tried gogol-1.0.0.0, but its *library* requires crypton-x509 >=1.5 && < 1.8 and the snapshot contains crypton-x509-1.9.1 + - gogol < 0 # tried gogol-1.0.0.0, but its *library* requires crypton-x509-store >=1.5 && < 1.7 and the snapshot contains crypton-x509-store-1.9.0 - grouped-list < 0 # tried grouped-list-0.2.3.0, but its *library* requires base >=4.8 && < 4.17 and the snapshot contains base-4.21.2.0 - gtk < 0 # tried gtk-0.15.10, but its *library* requires the disabled package: glib - gtk3 < 0 # tried gtk3-0.15.10, but its *library* requires the disabled package: glib @@ -6928,6 +6933,7 @@ packages: - hit < 0 # tried hit-0.7.0, but its *executable* requires the disabled package: git - hmatrix-repa < 0 # tried hmatrix-repa-0.1.2.2, but its *library* requires the disabled package: repa - hnock < 0 # tried hnock-0.4.0, but its *library* requires text >=1.2.3.0 && < 1.3 and the snapshot contains text-2.1.4 + - hoauth2 < 0 # tried hoauth2-2.15.1, but its *library* requires crypton >=0.32 && < 1.1 and the snapshot contains crypton-1.1.4 - hocon < 0 # tried hocon-0.1.0.4, but its *library* requires MissingH < =1.4.3.0 and the snapshot contains MissingH-1.6.0.3 - hocon < 0 # tried hocon-0.1.0.4, but its *library* requires parsec < =3.1.14.0 and the snapshot contains parsec-3.1.18.0 - hocon < 0 # tried hocon-0.1.0.4, but its *library* requires split < =0.2.3.4 and the snapshot contains split-0.2.5 @@ -7000,6 +7006,7 @@ packages: - hw-succinct < 0 # tried hw-succinct-0.1.0.1, but its *library* requires the disabled package: hw-rankselect - hw-xml < 0 # tried hw-xml-0.5.1.2, but its *executable* requires generic-lens >=2.2 && < 2.3 and the snapshot contains generic-lens-2.3.0.0 - hw-xml < 0 # tried hw-xml-0.5.1.2, but its *executable* requires optparse-applicative >=0.15.1.0 && < 0.19 and the snapshot contains optparse-applicative-0.19.0.0 + - hyperbole < 0 # tried hyperbole-0.6.1, but its *library* requires http-client-tls >=0.3 && < 0.4 and the snapshot contains http-client-tls-0.4.0 - ilist < 0 # tried ilist-0.4.0.1, but its *library* requires base >=4.10 && < 4.20 and the snapshot contains base-4.21.2.0 - influxdb < 0 # tried influxdb-1.9.3.2, but its *library* requires Cabal >=1.24 && < 3.13 and the snapshot contains Cabal-3.14.2.0 - influxdb < 0 # tried influxdb-1.9.3.2, but its *library* requires base >=4.11 && < 4.21 and the snapshot contains base-4.21.2.0 @@ -7060,6 +7067,7 @@ packages: - jvm-streaming < 0 # tried jvm-streaming-0.4.0, but its *library* requires the disabled package: jni - jvm-streaming < 0 # tried jvm-streaming-0.4.0, but its *library* requires the disabled package: jvm-batching - kanji < 0 # tried kanji-3.5.0, but its *library* requires aeson ^>=2.0 and the snapshot contains aeson-2.2.5.0 + - kubernetes-api-client < 0 # tried kubernetes-api-client-0.6.1.2, but its *library* requires the disabled package: hoauth2 - l10n < 0 # tried l10n-0.1.0.1, but its *library* requires text >=1 && < 2 and the snapshot contains text-2.1.4 - lambdabot-core < 0 # tried lambdabot-core-5.3.1.2, but its *library* requires the disabled package: random-fu - lambdabot-irc-plugins < 0 # tried lambdabot-irc-plugins-5.3.1.2, but its *library* requires the disabled package: lambdabot-core @@ -7301,6 +7309,7 @@ packages: - pinboard < 0 # tried pinboard-0.10.3.0, but its *library* requires text >=0.11 && < 1.3 and the snapshot contains text-2.1.4 - pinboard < 0 # tried pinboard-0.10.3.0, but its *library* requires vector >=0.10.9 && < 0.13 and the snapshot contains vector-0.13.2.0 - pipes-category < 0 # tried pipes-category-0.3.0.0, but its *library* requires lens >=4 && < 5 and the snapshot contains lens-5.3.6 + - pipes-http < 0 # tried pipes-http-1.0.6, but its *library* requires http-client-tls < 0.4 and the snapshot contains http-client-tls-0.4.0 - pipes-misc < 0 # tried pipes-misc-0.5.0.0, but its *library* requires mtl >=2 && < 2.3 and the snapshot contains mtl-2.3.2 - pipes-mongodb < 0 # tried pipes-mongodb-0.1.0.0, but its *library* requires the disabled package: mongoDB - pipes-text < 0 # tried pipes-text-1.0.1, but its *library* requires bytestring >=0.9.2.1 && < 0.12 and the snapshot contains bytestring-0.12.2.0 @@ -7460,6 +7469,7 @@ packages: - simple-session < 0 # tried simple-session-2.0.0, but its *library* requires the disabled package: cryptohash - siphash < 0 # tried siphash-1.0.3, but its *library* requires bytestring < 0.11 and the snapshot contains bytestring-0.12.2.0 - skeletons < 0 # tried skeletons-0.4.0, but its *executable* requires the disabled package: tinytemplate + - slack-web < 0 # tried slack-web-2.2.0.0, but its *library* requires http-client-tls >=0.3 && < 0.4 and the snapshot contains http-client-tls-0.4.0 - smash < 0 # tried smash-0.1.3, but its *library* requires base >=4.12 && < 4.17 and the snapshot contains base-4.21.2.0 - smash < 0 # tried smash-0.1.3, but its *library* requires bifunctors ^>=5.5 and the snapshot contains bifunctors-5.6.3 - smash < 0 # tried smash-0.1.3, but its *library* requires deepseq ^>=1.4 and the snapshot contains deepseq-1.5.1.0 @@ -7563,6 +7573,7 @@ packages: - tls-debug < 0 # tried tls-debug-0.4.8, but its *executable* requires the disabled package: x509-system - tls-debug < 0 # tried tls-debug-0.4.8, but its *executable* requires the disabled package: x509-validation - tls-debug < 0 # tried tls-debug-0.4.8, but its *executable* requires tls >=1.3 && < 1.6 and the snapshot contains tls-2.1.14 + - tls-sslkeylogfile < 0 # tried tls-sslkeylogfile-0.1.0.0, but its *library* requires tls >=1.8 && < 2.0 || >=2.0 && < 2.3 and the snapshot contains tls-2.4.3 - tmp-postgres < 0 # tried tmp-postgres-1.34.1.0, but its *library* requires ansi-wl-pprint < 1 and the snapshot contains ansi-wl-pprint-1.0.2 - tonalude < 0 # tried tonalude-0.2.0.0, but its *library* requires Cabal < 3.12 and the snapshot contains Cabal-3.14.2.0 - tonalude < 0 # tried tonalude-0.2.0.0, but its *library* requires base >=4.14 && < 4.18 and the snapshot contains base-4.21.2.0 @@ -7650,9 +7661,13 @@ packages: - web-routes-hsp < 0 # tried web-routes-hsp-0.24.6.2, but its *library* requires the disabled package: hsp - web-routes-wai < 0 # tried web-routes-wai-0.24.3.2, but its *library* requires bytestring >=0.9 && < 0.12 and the snapshot contains bytestring-0.12.2.0 - web-routes-wai < 0 # tried web-routes-wai-0.24.3.2, but its *library* requires text >=0.11 && < 2.1 and the snapshot contains text-2.1.4 + - web3-tools < 0 # tried web3-tools-0.1.0.0, but its *library* requires crypton >=1.0.4 && < 1.1 and the snapshot contains crypton-1.1.4 - webdriver-angular < 0 # tried webdriver-angular-0.1.11, but its *library* requires language-javascript >=0.6 && < 0.7 and the snapshot contains language-javascript-0.7.1.0 - webdriver-angular < 0 # tried webdriver-angular-0.1.11, but its *library* requires webdriver >=0.6 && < 0.9 and the snapshot contains webdriver-0.15.0.0 + - webgear-core < 0 # tried webgear-core-1.5.0, but its *library* requires jose >=0.10 && < 0.13 and the snapshot contains jose-0.13 + - webgear-server < 0 # tried webgear-server-1.5.0, but its *library* requires jose >=0.10 && < 0.13 and the snapshot contains jose-0.13 - webgear-swagger < 0 # tried webgear-swagger-1.5.0, but its *library* requires swagger2 >=2.8 && < 2.9 and the snapshot contains swagger2-2.9 + - webgear-swagger-ui < 0 # tried webgear-swagger-ui-1.5.0, but its *library* requires the disabled package: webgear-core - wikicfp-scraper < 0 # tried wikicfp-scraper-0.1.0.13, but its *library* requires bytestring >=0.10.0 && < 0.12 and the snapshot contains bytestring-0.12.2.0 - wikicfp-scraper < 0 # tried wikicfp-scraper-0.1.0.13, but its *library* requires text >=0.11.3.1 && < 1.3 and the snapshot contains text-2.1.4 - wikicfp-scraper < 0 # tried wikicfp-scraper-0.1.0.13, but its *library* requires time >=1.4.0 && < 1.12 and the snapshot contains time-1.14 @@ -7681,6 +7696,7 @@ packages: - yesod-auth-bcryptdb < 0 # tried yesod-auth-bcryptdb-0.3.0.1, but its *library* requires yesod-auth >=1.4.18 && < 1.5 and the snapshot contains yesod-auth-1.6.12.1 - yesod-auth-bcryptdb < 0 # tried yesod-auth-bcryptdb-0.3.0.1, but its *library* requires yesod-core >=1.4 && < 1.5 and the snapshot contains yesod-core-1.6.29.1 - yesod-auth-bcryptdb < 0 # tried yesod-auth-bcryptdb-0.3.0.1, but its *library* requires yesod-form >=1.4 && < 1.5 and the snapshot contains yesod-form-1.7.9.3 + - yesod-auth-oauth2 < 0 # tried yesod-auth-oauth2-0.8.0.0, but its *library* requires the disabled package: hoauth2 - yesod-bin < 0 # tried yesod-bin-1.6.2.4, but its *executable* requires tar >=0.4 && < 0.7 and the snapshot contains tar-0.7.1.0 - yesod-form-richtext < 0 # tried yesod-form-richtext-0.1.0.2, but its *library* requires yesod-core >=1.4 && < 1.5 and the snapshot contains yesod-core-1.6.29.1 - yesod-form-richtext < 0 # tried yesod-form-richtext-0.1.0.2, but its *library* requires yesod-form >=1.4.4.1 && < 1.5 and the snapshot contains yesod-form-1.7.9.3