alexcrichton / tar-rs

Tar file reading/writing for Rust
https://docs.rs/tar
Apache License 2.0
616 stars 178 forks source link

update xattr to 1.1.3 #348

Closed sunshowers closed 1 month ago

sunshowers commented 7 months ago

xattr 1.0.0 through 1.1.2 have a bug (https://github.com/Stebalien/xattr/pull/48). Bump the requirement so that downstream dependents get the latest version.

adamqqqplay commented 3 months ago

@sunshowers Thanks! Currently xattr has released v1.3.1, can we bump to this version?

sunshowers commented 3 months ago

Sure, note that I'm not a maintainer so you may wish to write your own PR.

alexcrichton commented 1 month ago

Thanks!

I'll also note that technically this isn't necessary since these versions are all "1.x.x" compatible meaning that downstream consumers can always update. This change works by preventing tar from being used with previous versions (with the next release of tar)

alexcrichton commented 1 month ago

Also sorry for the delay on merging :(

sunshowers commented 1 month ago

Thanks! The problem is not that downstream dependents can't update, it's that they won't update transitive deps unless prodded.