Nitrokey / opcard-rs

OpenPGP card implementation
49 stars 1 forks source link

Release new version on crates.io #202

Open wiktor-k opened 4 months ago

wiktor-k commented 4 months ago

Hi folks! :wave:

I've noticed that the version on crates.io is super-old: https://crates.io/crates/opcard (opcard = "0.0.0" over 1 year ago).

Would it be possible to release a new version there with cargo publish?

Context: I'm using your crate to test my code against cards in a docker image and currently it involves cloning your repo and hoping the main branch is clean.

Thank you very much! :bow:

robin-nitrokey commented 4 months ago

We’re tagging releases on GitHub so the preferred way to use it at the moment would be to use the latest tag which should be relatively stable. Publishing to crates.io is planned but unfortunately we require unpublished changes in other crates so the published code would not compile without applying patches. Hopefully we will have a solution to that soon.

wiktor-k commented 4 months ago

Thanks for the reply @robin-nitrokey ! I took a look at Cargo.toml but didn't spot any "path" dependencies and thought it's just a matter of someone doing cargo publish.

Okay, so I'll use the latest release and in the meantime if you don't mind let's keep this ticket open until all things have been settled.

Thanks for your time!

robin-nitrokey commented 4 months ago

We’re using patch dependencies instead because it is easier to synchronize over multiple crates:

https://github.com/Nitrokey/opcard-rs/blob/01329c9e342a594fe233b1e71cb89304a1aec43e/Cargo.toml#L93-L108

wiktor-k commented 4 months ago

Ahh, that's right! :man_facepalming: Given there are quite a few of them I understand the effort is non-insignificant.

sosthene-nitrokey commented 4 months ago

One of the challenges is that we don't own all of these dependencies so we need to synchronize releases with those upstream, which is why we haven't just published everything regularly.