alexcrichton / tar-rs

Tar file reading/writing for Rust
https://docs.rs/tar
Apache License 2.0
629 stars 190 forks source link

update xattr to 1.1.3 #348

Closed sunshowers closed 5 months ago

sunshowers commented 11 months ago

xattr 1.0.0 through 1.1.2 have a bug (https://github.com/Stebalien/xattr/pull/48). Bump the requirement so that downstream dependents get the latest version.

adamqqqplay commented 7 months ago

@sunshowers Thanks! Currently xattr has released v1.3.1, can we bump to this version?

sunshowers commented 7 months ago

Sure, note that I'm not a maintainer so you may wish to write your own PR.

alexcrichton commented 5 months ago

Thanks!

I'll also note that technically this isn't necessary since these versions are all "1.x.x" compatible meaning that downstream consumers can always update. This change works by preventing tar from being used with previous versions (with the next release of tar)

alexcrichton commented 5 months ago

Also sorry for the delay on merging :(

sunshowers commented 5 months ago

Thanks! The problem is not that downstream dependents can't update, it's that they won't update transitive deps unless prodded.