From 5b46db64e31c3744758bdf58db9132ada82984f4 Mon Sep 17 00:00:00 2001
From: maclane <maclane@nucypher.com>
Date: Thu, 11 Jun 2026 15:36:38 -0400
Subject: [PATCH] deps(tbtc/signer): move frost-secp256k1-tr off the
 release-candidate pin to =3.0.0 final

frost-secp256k1-tr 3.0.0 (with frost-core and frost-rerandomized
3.0.0) is published and unyanked; the engine was pinned to the
=3.0.0-rc.0 release candidate. Pin the final release instead --
release candidates receive no post-release fixes and are the wrong
long-term anchor for the curve/ciphersuite layer under custody code.
Exact-pin discipline is retained.

Full suite passes unchanged against the final (244 tests; clippy
clean), confirming no API or behavior drift from rc.0.

Audit-trail follow-up for the rollout gates: record which ZF/external
audit reports cover frost-core 3.x and the secp256k1-tr ciphersuite
specifically, alongside the existing audit-lineage notes.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 pkg/tbtc/signer/Cargo.lock | 12 ++++++------
 pkg/tbtc/signer/Cargo.toml |  2 +-
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/pkg/tbtc/signer/Cargo.lock b/pkg/tbtc/signer/Cargo.lock
index 16f0234fd5..e77fe4d2f5 100644
--- a/pkg/tbtc/signer/Cargo.lock
+++ b/pkg/tbtc/signer/Cargo.lock
@@ -541,9 +541,9 @@ checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
 
 [[package]]
 name = "frost-core"
-version = "3.0.0-rc.0"
+version = "3.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b28afb08296406bf64550a289fe37a779747cf24b062a8ad5f24f9c871d4b425"
+checksum = "81ef2787af391c7e8bedc037a3b9ea03dde803fbd93e778e6bb369547800e5cd"
 dependencies = [
  "byteorder",
  "const-crc32-nostd",
@@ -563,9 +563,9 @@ dependencies = [
 
 [[package]]
 name = "frost-rerandomized"
-version = "3.0.0-rc.0"
+version = "3.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "53efb7cfa387cb25b5a5ce3269dd05704fd879bc72b07d3598db0e4d222de16f"
+checksum = "8f4c5cedd2426728adef2c0b1720f57676354c473836d1ccc50d0f0d1c91942b"
 dependencies = [
  "derive-getters",
  "document-features",
@@ -576,9 +576,9 @@ dependencies = [
 
 [[package]]
 name = "frost-secp256k1-tr"
-version = "3.0.0-rc.0"
+version = "3.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b8aa04ff85d94c85b5b679909380df227bf09206e4705670e54cf628b2effd6"
+checksum = "c6fca4ca9f057cf22066f3eb5bbda59d2af51f429f2aac5982a11a8a841c0993"
 dependencies = [
  "document-features",
  "frost-core",
diff --git a/pkg/tbtc/signer/Cargo.toml b/pkg/tbtc/signer/Cargo.toml
index ef958976a2..6790fb46a1 100644
--- a/pkg/tbtc/signer/Cargo.toml
+++ b/pkg/tbtc/signer/Cargo.toml
@@ -19,7 +19,7 @@ serde_json = "1.0"
 sha2 = "0.10"
 hex = "0.4"
 thiserror = "2.0"
-frost-secp256k1-tr = "=3.0.0-rc.0"
+frost-secp256k1-tr = "=3.0.0"
 chacha20poly1305 = "0.10"
 rand_chacha = "0.3"
 libc = "0.2"