Marcono1234 / struson

Streaming JSON reader and writer written in Rust
https://crates.io/crates/struson
Apache License 2.0
59 stars 6 forks source link

Add GitHub workflow checking minimal dependency versions #77

Open Marcono1234 opened 2 months ago

Marcono1234 commented 2 months ago

Problem solved by the enhancement

By accident Struson could depend on a future introduced by a version of a dependency newer than specified in Cargo.toml; users of Struson could then encounter build issues if Cargo's dependency resolution picks the older version (e.g. due to restrictions from other dependencies).

Enhancement description

Consider using Cargo's direct-minimal-versions or https://crates.io/crates/cargo-minimal-versions (or similar).

Alternatives / workarounds

Marcono1234 commented 1 month ago

Maybe this is not that important, or needed at all, because Dependabot keeps the versions up to date and makes sure Cargo.toml and Cargo.lock are in sync. Might mainly be an issue when intentionally staying on older minimum dependency version, but the version in Cargo.lock is updated to a newer version.