Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The latest stable release of sled indirectly depends on an unmaintained crate (instant) #1513

Open
VorpalBlade opened this issue Nov 11, 2024 · 0 comments
Labels

Comments

@VorpalBlade
Copy link

Bug reports must include all following items:

  1. expected result: No cargo deny warnings when using the non-alpha release of sled
  2. actual result:

When using cargo deny on my project that has an indirect dependency on sled I get:

error[unmaintained]: `instant` is unmaintained
    ┌─ /home/arvid/src/paketkoll/Cargo.lock:120:1
    │
120 │ instant 0.1.13 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
    │
    ├ ID: RUSTSEC-2024-0384
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0384
    ├ This crate is no longer maintained, and the author recommends using the maintained [`web-time`] crate instead.
      
      [`web-time`]: https://crates.io/crates/web-time
    ├ Solution: No safe upgrade is available!
    ├ instant v0.1.13
      ├── parking_lot v0.11.2
      │   └── sled v0.34.7

This can be fxed by a new release in the sled 0.34.x series that depends on a newer semver version of parking_lot (0.12.x). As 1.0 alpha has apparently been in alpha for over a year, that does not seem like a viable short term fix to this.

  1. sled version: 0.34.7
  2. rustc version: 1.82.0
  3. operating system: Arch Linux
  4. minimal code sample that helps to reproduce the issue: N/A
  5. logs, panic messages, stack traces: N/A

Incomplete bug reports will be closed.

Do not open bug reports for documentation issues. Please just open a PR with the proposed documentation change.

Thank you for understanding :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant