Merge pull request #8050 from commercialhaskell/tls-2.2-crypton-1.1

allow http-client-tls-0.4, crypton-x509*-1.9, tls-2.2+, jose-1.3

Author: juhp

build-constraints.yaml

@@ -5685,6 +5685,7 @@ packages:
         - minisat
         - minisat-solver
         - missing-foreign
+        - mlkem
         - mmap
         - mmorph
         - mockery
@@ -6814,6 +6815,7 @@ packages:
         - fib < 0 # tried fib-0.1.0.1, but its *library* requires the disabled package: base-noprelude
         - fields-and-cases < 0 # tried fields-and-cases-0.2.0.0, but its *library* requires base >=4.17.2.0 && < 4.20 and the snapshot contains base-4.21.2.0
         - fin < 0 # tried fin-0.3.2, but its *library* requires QuickCheck ^>=2.14.2 || ^>=2.15 || ^>=2.18.0.0 and the snapshot contains QuickCheck-2.16.0.0
+        - firebase-hs < 0 # tried firebase-hs-0.2.0.0, but its *library* requires http-client-tls >=0.3 && < 0.4 and the snapshot contains http-client-tls-0.4.0
         - first-class-patterns < 0 # tried first-class-patterns-0.3.2.5, but its *library* requires transformers >=0.1.0 && < 0.6 and the snapshot contains transformers-0.6.3.0
         - flat-mcmc < 0 # tried flat-mcmc-1.5.2, but its *library* requires text >=1.2 && < 2 and the snapshot contains text-2.1.4
         - flat-mcmc < 0 # tried flat-mcmc-1.5.2, but its *library* requires transformers >=0.2 && < 0.6 and the snapshot contains transformers-0.6.3.0
@@ -6851,12 +6853,16 @@ packages:
         - git < 0 # tried git-0.3.0, but its *library* requires bytestring >=0.9 && < 0.11 and the snapshot contains bytestring-0.12.2.0
         - git < 0 # tried git-0.3.0, but its *library* requires the disabled package: cryptonite
         - github-webhooks < 0 # tried github-webhooks-0.18.0, but its *library* requires the disabled package: cryptonite
+        - gitit < 0 # tried gitit-0.16, but its *library* requires the disabled package: hoauth2
         - glaze < 0 # tried glaze-0.3.0.1, but its *library* requires lens >=4 && < 5 and the snapshot contains lens-5.3.6
         - gloss-examples < 0 # tried gloss-examples-1.13.0.4, but its *executable* requires bytestring >=0.10 && < 0.12 and the snapshot contains bytestring-0.12.2.0
         - gloss-examples < 0 # tried gloss-examples-1.13.0.4, but its *executable* requires containers >=0.5 && < 0.7 and the snapshot contains containers-0.7
         - gloss-examples < 0 # tried gloss-examples-1.13.0.4, but its *executable* requires random >=1.2 && < 1.3 and the snapshot contains random-1.3.1
         - gloss-examples < 0 # tried gloss-examples-1.13.0.4, but its *executable* requires vector >=0.11 && < 0.13 and the snapshot contains vector-0.13.2.0
         - gloss-raster < 0 # tried gloss-raster-1.13.1.2, but its *library* requires containers >=0.5 && < 0.7 and the snapshot contains containers-0.7
+        - gogol < 0 # tried gogol-1.0.0.0, but its *library* requires crypton >=0.34 && < 1.1 and the snapshot contains crypton-1.1.4
+        - gogol < 0 # tried gogol-1.0.0.0, but its *library* requires crypton-x509 >=1.5 && < 1.8 and the snapshot contains crypton-x509-1.9.1
+        - gogol < 0 # tried gogol-1.0.0.0, but its *library* requires crypton-x509-store >=1.5 && < 1.7 and the snapshot contains crypton-x509-store-1.9.0
         - grouped-list < 0 # tried grouped-list-0.2.3.0, but its *library* requires base >=4.8 && < 4.17 and the snapshot contains base-4.21.2.0
         - gtk < 0 # tried gtk-0.15.10, but its *library* requires the disabled package: glib
         - gtk3 < 0 # tried gtk3-0.15.10, but its *library* requires the disabled package: glib
@@ -6927,6 +6933,7 @@ packages:
         - hit < 0 # tried hit-0.7.0, but its *executable* requires the disabled package: git
         - hmatrix-repa < 0 # tried hmatrix-repa-0.1.2.2, but its *library* requires the disabled package: repa
         - hnock < 0 # tried hnock-0.4.0, but its *library* requires text >=1.2.3.0 && < 1.3 and the snapshot contains text-2.1.4
+        - hoauth2 < 0 # tried hoauth2-2.15.1, but its *library* requires crypton >=0.32 && < 1.1 and the snapshot contains crypton-1.1.4
         - hocon < 0 # tried hocon-0.1.0.4, but its *library* requires MissingH < =1.4.3.0 and the snapshot contains MissingH-1.6.0.3
         - hocon < 0 # tried hocon-0.1.0.4, but its *library* requires parsec < =3.1.14.0 and the snapshot contains parsec-3.1.18.0
         - hocon < 0 # tried hocon-0.1.0.4, but its *library* requires split < =0.2.3.4 and the snapshot contains split-0.2.5
@@ -6999,6 +7006,7 @@ packages:
         - hw-succinct < 0 # tried hw-succinct-0.1.0.1, but its *library* requires the disabled package: hw-rankselect
         - hw-xml < 0 # tried hw-xml-0.5.1.2, but its *executable* requires generic-lens >=2.2 && < 2.3 and the snapshot contains generic-lens-2.3.0.0
         - hw-xml < 0 # tried hw-xml-0.5.1.2, but its *executable* requires optparse-applicative >=0.15.1.0 && < 0.19 and the snapshot contains optparse-applicative-0.19.0.0
+        - hyperbole < 0 # tried hyperbole-0.6.1, but its *library* requires http-client-tls >=0.3 && < 0.4 and the snapshot contains http-client-tls-0.4.0
         - ilist < 0 # tried ilist-0.4.0.1, but its *library* requires base >=4.10 && < 4.20 and the snapshot contains base-4.21.2.0
         - influxdb < 0 # tried influxdb-1.9.3.2, but its *library* requires Cabal >=1.24 && < 3.13 and the snapshot contains Cabal-3.14.2.0
         - influxdb < 0 # tried influxdb-1.9.3.2, but its *library* requires base >=4.11 && < 4.21 and the snapshot contains base-4.21.2.0
@@ -7059,6 +7067,7 @@ packages:
         - jvm-streaming < 0 # tried jvm-streaming-0.4.0, but its *library* requires the disabled package: jni
         - jvm-streaming < 0 # tried jvm-streaming-0.4.0, but its *library* requires the disabled package: jvm-batching
         - kanji < 0 # tried kanji-3.5.0, but its *library* requires aeson ^>=2.0 and the snapshot contains aeson-2.2.5.0
+        - kubernetes-api-client < 0 # tried kubernetes-api-client-0.6.1.2, but its *library* requires the disabled package: hoauth2
         - l10n < 0 # tried l10n-0.1.0.1, but its *library* requires text >=1 && < 2 and the snapshot contains text-2.1.4
         - lambdabot-core < 0 # tried lambdabot-core-5.3.1.2, but its *library* requires the disabled package: random-fu
         - lambdabot-irc-plugins < 0 # tried lambdabot-irc-plugins-5.3.1.2, but its *library* requires the disabled package: lambdabot-core
@@ -7300,6 +7309,7 @@ packages:
         - pinboard < 0 # tried pinboard-0.10.3.0, but its *library* requires text >=0.11 && < 1.3 and the snapshot contains text-2.1.4
         - pinboard < 0 # tried pinboard-0.10.3.0, but its *library* requires vector >=0.10.9 && < 0.13 and the snapshot contains vector-0.13.2.0
         - pipes-category < 0 # tried pipes-category-0.3.0.0, but its *library* requires lens >=4 && < 5 and the snapshot contains lens-5.3.6
+        - pipes-http < 0 # tried pipes-http-1.0.6, but its *library* requires http-client-tls < 0.4 and the snapshot contains http-client-tls-0.4.0
         - pipes-misc < 0 # tried pipes-misc-0.5.0.0, but its *library* requires mtl >=2 && < 2.3 and the snapshot contains mtl-2.3.2
         - pipes-mongodb < 0 # tried pipes-mongodb-0.1.0.0, but its *library* requires the disabled package: mongoDB
         - pipes-text < 0 # tried pipes-text-1.0.1, but its *library* requires bytestring >=0.9.2.1 && < 0.12 and the snapshot contains bytestring-0.12.2.0
@@ -7459,6 +7469,7 @@ packages:
         - simple-session < 0 # tried simple-session-2.0.0, but its *library* requires the disabled package: cryptohash
         - siphash < 0 # tried siphash-1.0.3, but its *library* requires bytestring < 0.11 and the snapshot contains bytestring-0.12.2.0
         - skeletons < 0 # tried skeletons-0.4.0, but its *executable* requires the disabled package: tinytemplate
+        - slack-web < 0 # tried slack-web-2.2.0.0, but its *library* requires http-client-tls >=0.3 && < 0.4 and the snapshot contains http-client-tls-0.4.0
         - smash < 0 # tried smash-0.1.3, but its *library* requires base >=4.12 && < 4.17 and the snapshot contains base-4.21.2.0
         - smash < 0 # tried smash-0.1.3, but its *library* requires bifunctors ^>=5.5 and the snapshot contains bifunctors-5.6.3
         - smash < 0 # tried smash-0.1.3, but its *library* requires deepseq ^>=1.4 and the snapshot contains deepseq-1.5.1.0
@@ -7562,6 +7573,7 @@ packages:
         - tls-debug < 0 # tried tls-debug-0.4.8, but its *executable* requires the disabled package: x509-system
         - tls-debug < 0 # tried tls-debug-0.4.8, but its *executable* requires the disabled package: x509-validation
         - tls-debug < 0 # tried tls-debug-0.4.8, but its *executable* requires tls >=1.3 && < 1.6 and the snapshot contains tls-2.1.14
+        - tls-sslkeylogfile < 0 # tried tls-sslkeylogfile-0.1.0.0, but its *library* requires tls >=1.8 && < 2.0 || >=2.0 && < 2.3 and the snapshot contains tls-2.4.3
         - tmp-postgres < 0 # tried tmp-postgres-1.34.1.0, but its *library* requires ansi-wl-pprint < 1 and the snapshot contains ansi-wl-pprint-1.0.2
         - tonalude < 0 # tried tonalude-0.2.0.0, but its *library* requires Cabal < 3.12 and the snapshot contains Cabal-3.14.2.0
         - tonalude < 0 # tried tonalude-0.2.0.0, but its *library* requires base >=4.14 && < 4.18 and the snapshot contains base-4.21.2.0
@@ -7649,9 +7661,13 @@ packages:
         - web-routes-hsp < 0 # tried web-routes-hsp-0.24.6.2, but its *library* requires the disabled package: hsp
         - web-routes-wai < 0 # tried web-routes-wai-0.24.3.2, but its *library* requires bytestring >=0.9 && < 0.12 and the snapshot contains bytestring-0.12.2.0
         - web-routes-wai < 0 # tried web-routes-wai-0.24.3.2, but its *library* requires text >=0.11 && < 2.1 and the snapshot contains text-2.1.4
+        - web3-tools < 0 # tried web3-tools-0.1.0.0, but its *library* requires crypton >=1.0.4 && < 1.1 and the snapshot contains crypton-1.1.4
         - webdriver-angular < 0 # tried webdriver-angular-0.1.11, but its *library* requires language-javascript >=0.6 && < 0.7 and the snapshot contains language-javascript-0.7.1.0
         - webdriver-angular < 0 # tried webdriver-angular-0.1.11, but its *library* requires webdriver >=0.6 && < 0.9 and the snapshot contains webdriver-0.15.0.0
+        - webgear-core < 0 # tried webgear-core-1.5.0, but its *library* requires jose >=0.10 && < 0.13 and the snapshot contains jose-0.13
+        - webgear-server < 0 # tried webgear-server-1.5.0, but its *library* requires jose >=0.10 && < 0.13 and the snapshot contains jose-0.13
         - webgear-swagger < 0 # tried webgear-swagger-1.5.0, but its *library* requires swagger2 >=2.8 && < 2.9 and the snapshot contains swagger2-2.9
+        - webgear-swagger-ui < 0 # tried webgear-swagger-ui-1.5.0, but its *library* requires the disabled package: webgear-core
         - wikicfp-scraper < 0 # tried wikicfp-scraper-0.1.0.13, but its *library* requires bytestring >=0.10.0 && < 0.12 and the snapshot contains bytestring-0.12.2.0
         - wikicfp-scraper < 0 # tried wikicfp-scraper-0.1.0.13, but its *library* requires text >=0.11.3.1 && < 1.3 and the snapshot contains text-2.1.4
         - wikicfp-scraper < 0 # tried wikicfp-scraper-0.1.0.13, but its *library* requires time >=1.4.0 && < 1.12 and the snapshot contains time-1.14
@@ -7680,6 +7696,7 @@ packages:
         - yesod-auth-bcryptdb < 0 # tried yesod-auth-bcryptdb-0.3.0.1, but its *library* requires yesod-auth >=1.4.18 && < 1.5 and the snapshot contains yesod-auth-1.6.12.1
         - yesod-auth-bcryptdb < 0 # tried yesod-auth-bcryptdb-0.3.0.1, but its *library* requires yesod-core >=1.4 && < 1.5 and the snapshot contains yesod-core-1.6.29.1
         - yesod-auth-bcryptdb < 0 # tried yesod-auth-bcryptdb-0.3.0.1, but its *library* requires yesod-form >=1.4 && < 1.5 and the snapshot contains yesod-form-1.7.9.3
+        - yesod-auth-oauth2 < 0 # tried yesod-auth-oauth2-0.8.0.0, but its *library* requires the disabled package: hoauth2
         - yesod-bin < 0 # tried yesod-bin-1.6.2.4, but its *executable* requires tar >=0.4 && < 0.7 and the snapshot contains tar-0.7.1.0
         - yesod-form-richtext < 0 # tried yesod-form-richtext-0.1.0.2, but its *library* requires yesod-core >=1.4 && < 1.5 and the snapshot contains yesod-core-1.6.29.1
         - yesod-form-richtext < 0 # tried yesod-form-richtext-0.1.0.2, but its *library* requires yesod-form >=1.4.4.1 && < 1.5 and the snapshot contains yesod-form-1.7.9.3
@@ -7773,27 +7790,6 @@ packages:
         - base-compat < 0.15.0
         - base-compat-batteries < 0.15.0
 
-        # https://github.com/commercialhaskell/stackage/issues/7929
-        - crypto-token < 0.2.0
-        - crypton < 1.1.0
-        - crypton-conduit < 0.3.0
-        - crypton-connection < 0.4.6
-        - crypton-x509 < 1.8.0
-        - crypton-x509-store < 1.8.0
-        - crypton-x509-system < 1.8.0
-        - crypton-x509-validation < 1.8.0
-        - hpke < 0.1.0
-        - http3 < 0.1.3
-        - quic < 0.2.22
-        - tls < 2.2.0
-        - tls-session-manager < 0.1.0
-        - smtp-mail < 0.5.0.1
-        - pusher-http-haskell < 2.1.0.22
-        - wreq < 0.5.4.5
-        - password < 3.1.1
-        - mime-mail-ses < 0.4.5
-        - hash-tree < 0.1.0
-
         # https://github.com/commercialhaskell/stackage/issues/7930
         - happy < 2.2
         - happy-lib < 2.2
@@ -7829,19 +7825,12 @@ packages:
         # https://github.com/commercialhaskell/stackage/issues/8018
         - text-iso8601 < 0.2
 
-        # https://github.com/commercialhaskell/stackage/issues/8033
-        - jose < 0.13
-
         # https://github.com/commercialhaskell/stackage/issues/8037
         - magic < 1.2
 
         # https://github.com/commercialhaskell/stackage/issues/8049
         - apecs < 0.10
 
-        # https://github.com/commercialhaskell/stackage/issues/7966
-        - http-client-tls < 0.4
-        - aws < 0.25.3
-
         # https://github.com/commercialhaskell/stackage/issues/8058
         - hackage-revdeps < 0.4
     # end of Stackage upper bounds
@@ -7871,6 +7860,10 @@ package-flags:
     curl:
         new-base: true
 
+    # https://github.com/dhall-lang/dhall-haskell/issues/2748
+    dhall:
+        use-http-client-tls: false
+
     hpio:
         test-hlint: false
 
@@ -7969,9 +7962,6 @@ package-flags:
     path:
       os-string: true
 
-    # https://github.com/commercialhaskell/stackage/issues/7929
-    mysql-haskell:
-      crypton-1-1: false
 # end of package-flags
 
 # Special configure options for individual packages