~ireas/public-inbox

[merge-rs] Updates & Maintenance

Details
Message ID
<0fb5edad-e7b3-47dc-b678-13e348bd67e4@systemli.org>
DKIM signature
pass
Download raw message
Hey there,

we have this cascade of deps where merge uses an unmaintained 
`proc-macro-error` crate.

Would you be able to migrate it and push a new release or would you mind 
us (rustic-rs org) taking over maintenance of the `merge-rs` crate in 
our org?

We use it quite a lot and it would be nice to keep it updated. You can 
add me to `merge`, `merge-derive` and `merge-derive-hashmap` via the 
crates.io dashboard owner invites.

Cheers,

Simon

Our advisory:

proc-macro-error 1.0.4 
registry+https://github.com/rust-lang/crates.io-index │ 
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 
unmaintained advisory detected │ ├ ID: RUSTSEC-2024-0370 ├ Advisory: 
https://rustsec.org/advisories/RUSTSEC-2024-0370 ├ proc-macro-error's 
maintainer seems to be unreachable, with no commits for 2 years, no 
releases pushed for 4 years, and no activity on the GitLab repo or rLab 
repo or response to email. proc-macro-error also depends on `syn 1.x`, 
which may be bringing duplicate dependencies into dependant build trees. 
## Possible Alternative(s) - [manyhow](https://crates.io/crates/manyhow) 
- [proc-macro-error2](https://crates.io/crates/proc-macro-error2) - 
[proc-macro2-diagnostics](https://github.com/SergioBenitez/proc-macro2-diagnostics)oc-macro2-diagnostics) 
├ Announcement: 
https://gitlab.com/CreepySkeleton/proc-macro-error/-/issues/20 ├ 
Solution: No safe upgrade is available! ├ proc-macro-error v1.0.4 └── 
merge_derive v0.1.0 └── merge v0.1.0 ├── rustic-rs v0.8.1 ├── 
rustic_backend v0.3.0 │ └── rustic-rs v0.8.1 (*) └── rustic_core v0.4.0 
├── rustic-rs v0.8.1 (*) ├── rustic_backend v0.3.0 (*) └── 
rustic_testing v0.2.1 └── (dev) rustic-rs v0.8.1 (*)
Reply to thread Export thread (mbox)