libmimalloc-sys: Differences between version on crates.io and in repo version (0.1.35)

[VorpalBlade]

Using cargo-goggles I discovered that libmimalloc-sys has differences between the version on crates.io and the version in the repo at the tag v0.1.35:

• extended.rs differs (more code in repo)
• c_src differs significantly (different version of bundled mimalloc!)
• Declared version in Cargo.toml differs

The changes don't seem malicious (and I would assume this is an honest mistake with placing the tag at the wrong commit), but they are somewhat concerning given the recent xz backdoor. I would like an explanation of what is going on here.

[octavonce]

I didn't run cargo goggles but at first glance this seems to match this.

However, I see that v0.1.31 libmimalloc-sys is yanked for some reason I cannot remember now. Which means it would use a later version.

[scottlamb]

To me it looks like the tag names in the Git repo correspond to crate mimalloc versions. I don't see any tags that directly relate to libmimalloc-sys versions. And there have been more mimalloc releases than libmimalloc-sys releases.