Cargo.toml: loosen dependency version on chacha20
#1698
Conversation
Not binding to a strict version of chacha20 (only a minimum) would make for a much smoother release process. Especially to get over the API breaks humps coming in rand_core 0.10.0-rc.3
|
Not strictly restricting the patch-version of |
|
Please commit the cargo.lock then. This is what it is used for. Restricting the version in the cargo.toml makes it hard (requires a patch on top, and a git branch, more work) to test changes in downstream crates. I’m doing integration work in large consumers of the rustcrypto ecosystem (tss-esapi, rpgp, …) that proved to be helpful chasing down bugs early in release cycle. Having to unpin version for every dependency would be a lot more work than it currently is. |
What I don't understand here: you want to use Hence, this only benefits cases where pre-releases are not API-breaking (or at least not affecting some dependency) IIUC? I can see some benefit then, but it's not as simple as this PR; it also requires committing We ought to merge #1697 first. In any case, I'm off now for a few days; happy Christmas (if relevant to you). |
As discussed in rust-random#1698. This also loosen the dependency to `chacha20`. Not binding to a strict version of chacha20 (only a minimum) would make for a much smoother release process. Especially to get over the API breaks humps coming in rand_core 0.10.0-rc.3
As discussed in rust-random#1698. This also loosen the dependency to `chacha20`. Not binding to a strict version of chacha20 (only a minimum) would make for a much smoother release process. Especially to get over the API breaks humps coming in rand_core 0.10.0-rc.3
As discussed in rust-random#1698. This also loosen the dependency to `chacha20`. Not binding to a strict version of chacha20 (only a minimum) would make for a much smoother release process. Especially to get over the API breaks humps coming in rand_core 0.10.0-rc.3
2 participants
Summary
Not binding to a strict version of chacha20 (only a minimum) would make for a much smoother release process. Especially to get over the API breaks humps coming in rand_core 0.10.0-rc.3
Motivation
Details