feat: parallelize package downloads and verification

Share HTTP connections across bounded concurrent downloads and combine checksum and Minisign verification into a single streaming pass. Assisted-by: Codex <codex@openai.com>
2026-07-13 00:35:37 -05:00
parent 41ef6556c8
commit e450b00213
6 changed files with 437 additions and 179 deletions
@@ -1,6 +1,6 @@
 [package]
 name = "depot"
-version = "0.60.0"
+version = "1.0.0"
 edition = "2024"

 [lints.rust]
@@ -42,7 +42,7 @@ xz2 = "0.1.7"
 zip = "8.5.0"
 zstd = { version = "0.13.3", features = ["zstdmt"] }
 inquire = "0.9.4"
-md5 = "0.8.0"
+md5 = "0.8.1"
 suppaftp = "10.0.0"
 minisign = "0.9.1"
 petgraph = "0.8.3"