Skip to content

Conversation

Savio-Sou
Copy link
Contributor

Description

Problem*

For nargo installation:

  • The version of noirup script used is a little old (v0.1.3 vs v0.1.4)
  • The version of nargo used is quite old (v0.36.0 vs v1.0.0-beta.11)
  • The version of nargo used is hard-coded at different places

For bb installation:

  • The downloading of bbup relies on bbup the NPM package rather than the raw GitHub source, which introduces additional supply attack chain vectors and is prone to falling out of date

Summary*

For nargo installation:

  • Update to use v0.1.4 noirup
  • Update to use Noir v1.0.0-beta.11
  • Add and use an environmental variable for targetted Noir version

For bb installation:

PR Checklist*

  • I have tested the changes locally.
  • I have formatted the changes with Prettier and/or cargo fmt on default settings.

@Savio-Sou Savio-Sou requested a review from jialinli98 August 25, 2025 15:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant