Skip to content

Start updating dependencies#1163

Open
lionel- wants to merge 7 commits intomainfrom
task/dependencies
Open

Start updating dependencies#1163
lionel- wants to merge 7 commits intomainfrom
task/dependencies

Conversation

@lionel-
Copy link
Copy Markdown
Contributor

@lionel- lionel- commented Apr 22, 2026

Progress towards #1162 and fixing security alerts.

  • cargo update: bumps versions in the lockfile
  • cargo upgrade: bumps manifest versions within current semranges
  • Then a few incompatible bumps (dashmap 6, embed-resource 3, env_logger 0.11,itertools 0.14, libloading 0.9, strum 0.28, winsafe 0.0.27,xdg 3)
  • Switched to rust-yaml2 as rust-yaml is unmaintained
  • More updates (base64 0.21 to 0.22, dirs 4 to 6, http 0.2 removed, rand 0.8 to 0.10,

lionel- added 5 commits April 22, 2026 10:12
Bump `hmac` 0.12 to 0.13 and `sha2` 0.10 to 0.11. These new versions
use const generics instead of `generic-array`, so both `generic-array`
and `crypto-common` are no longer needed as direct dependencies.
Update `dashmap` 6, `embed-resource` 3, `env_logger` 0.11,
`itertools` 0.14, `libloading` 0.9, `strum` 0.28, `winsafe` 0.0.27,
`xdg` 3, and adapt call sites to their new APIs.
Comment thread crates/ark/build.rs
Comment thread crates/harp/build.rs Outdated
lionel- added 2 commits April 22, 2026 14:15
base64 0.21 to 0.22
dirs 4 to 6
http 0.2 to removed entirely: the only usage was `PathAndQuery`, which comes from actix_web`'s re-export
rand 0.8 to 0.10: `thread_rng()` -> `rng()`, `gen()` -> `random()`,
`Rng` -> `RngExt
@lionel- lionel- force-pushed the task/dependencies branch from 7bddeef to 77eb04f Compare April 22, 2026 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants