Skip to content

Start updating dependencies#1163

Merged
lionel- merged 8 commits intomainfrom
task/dependencies
Apr 30, 2026
Merged

Start updating dependencies#1163
lionel- merged 8 commits intomainfrom
task/dependencies

Conversation

@lionel-
Copy link
Copy Markdown
Contributor

@lionel- lionel- commented Apr 22, 2026

Progress towards #1162 and fixing security alerts.

  • cargo update: bumps versions in the lockfile
  • cargo upgrade: bumps manifest versions within current semranges
  • Then a few incompatible bumps (dashmap 6, embed-resource 3, env_logger 0.11,itertools 0.14, libloading 0.9, strum 0.28, winsafe 0.0.27,xdg 3)
  • Switched to rust-yaml2 as rust-yaml is unmaintained
  • More updates (base64 0.21 to 0.22, dirs 4 to 6, http 0.2 removed, rand 0.8 to 0.10,

Comment thread crates/ark/build.rs
Comment thread crates/harp/build.rs Outdated
@lionel- lionel- force-pushed the task/dependencies branch from 7bddeef to 77eb04f Compare April 22, 2026 12:26
lionel- added 8 commits April 30, 2026 10:21
Bump `hmac` 0.12 to 0.13 and `sha2` 0.10 to 0.11. These new versions
use const generics instead of `generic-array`, so both `generic-array`
and `crypto-common` are no longer needed as direct dependencies.
Update `dashmap` 6, `embed-resource` 3, `env_logger` 0.11,
`itertools` 0.14, `libloading` 0.9, `strum` 0.28, `winsafe` 0.0.27,
`xdg` 3, and adapt call sites to their new APIs.
base64 0.21 to 0.22
dirs 4 to 6
http 0.2 to removed entirely: the only usage was `PathAndQuery`, which comes from actix_web`'s re-export
rand 0.8 to 0.10: `thread_rng()` -> `rng()`, `gen()` -> `random()`,
`Rng` -> `RngExt
@lionel- lionel- force-pushed the task/dependencies branch from 77eb04f to 13277eb Compare April 30, 2026 08:23
@lionel- lionel- merged commit a168b38 into main Apr 30, 2026
13 checks passed
@lionel- lionel- deleted the task/dependencies branch April 30, 2026 09:12
@github-actions github-actions Bot locked and limited conversation to collaborators Apr 30, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants