Re: [tor-bugs] #22905 [Core Tor/Tor]: Cargo.lock and Cargo.toml specify incompatible dependencies for libc

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#22905: Cargo.lock and Cargo.toml specify incompatible dependencies for libc
-----------------------------+--------------------------
 Reporter:  isis             |          Owner:
     Type:  defect           |         Status:  new
 Priority:  Medium           |      Milestone:
Component:  Core Tor/Tor     |        Version:
 Severity:  Normal           |     Resolution:
 Keywords:  rust, tor-build  |  Actual Points:
Parent ID:                   |         Points:
 Reviewer:                   |        Sponsor:  SponsorZ
-----------------------------+--------------------------

Comment (by Sebastian):

 The Cargo.lock file is committed on purpose, because we want reproducible
 builds. In our setup we're building an "internal" library, not something
 other people would pull in from crates.io.

 The reason we're using "*" is that dependency updates are manual always
 (they include vendoring a new thing) so accidental updates should be
 impossible, unless I'm missing something here.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22905#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs