[RUSTSEC-2024-0363] Support sqlx 0.8

ParkMyCar / compact_str

A memory efficient string type that can store up to 24* bytes on the stack

MIT License

647 stars 47 forks source link

[RUSTSEC-2024-0363] Support sqlx 0.8 #407

Open rshigapov-bhft opened 1 month ago

rshigapov-bhft commented 1 month ago

sqlx 0.8 has fixed RUSTSEC-2024-0363.

I see two ways to support it:

drop sqlx 0.7 support and implement support for sqlx 0.8
add an extra feature like "sqlx-07" that allows users to keep working with sqlx 0.7 until they migrate to sqlx 0.8

ParkMyCar commented 1 month ago

Thanks for the heads up! I'll publish a v0.8.1 and ~~v0.7.2~~ that has a sqlx_08 feature, which should be semver compatible and allow folks to opt into sqlx 0.8 if need be

Edit: I forgot v0.7 didn't include the sqlx feature, it'll just be an update to v0.8

ParkMyCar commented 1 month ago

Darn, the above approach doesn't work because of https://github.com/rust-lang/cargo/issues/10801. We can't have sqlx 0.7 and 0.8 even if both are optional dependencies because Cargo tries to include both in the lockfile and bails because both link sqlite3 but at different versions.

I'll make this change on main and push a 0.9.0-beta.1