search

coreos / fedora-coreos-cincinnati

Backend for Fedora CoreOS auto-updates (Cincinnati server)
Other
11 stars 16 forks source link

cargo: update dependencies #73

Closed lucab closed 2 years ago

lucab commented 2 years ago

There are a few stale dependencies that we should take care of updating:

$ cargo outdated -R
commons
================
Name        Project  Compat  Latest  Kind    Platform
----        -------  ------  ------  ----    --------
actix-cors  0.2.0    ---     0.6.1   Normal  ---
actix-web   2.0.0    ---     4.1.0   Normal  ---
prometheus  0.11.0   ---     0.13.1  Normal  ---

fcos-graph-builder
================
Name        Project  Compat  Latest   Kind    Platform
----        -------  ------  ------   ----    --------
actix       0.9.0    ---     0.13.0   Normal  ---
actix-web   2.0.0    ---     4.1.0    Normal  ---
env_logger  0.8.4    ---     0.9.0    Normal  ---
prometheus  0.11.0   ---     0.13.1   Normal  ---
reqwest     0.10.10  ---     0.11.11  Normal  ---

fcos-policy-engine
================
Name        Project  Compat  Latest   Kind    Platform
----        -------  ------  ------   ----    --------
actix       0.9.0    ---     0.13.0   Normal  ---
actix-web   2.0.0    ---     4.1.0    Normal  ---
env_logger  0.8.4    ---     0.9.0    Normal  ---
prometheus  0.11.0   ---     0.13.1   Normal  ---
reqwest     0.10.10  ---     0.11.11  Normal  ---
serde_qs    0.6.1    ---     0.9.2    Normal  ---

Leaving aside for now all the actix ones (which require a full porting effort), all the other ones should be reasonably simple to upgrade to their latest versions. After that, we should also enable dependabot on this repository.

lucab commented 2 years ago

@mohelt took care of most of this in https://github.com/coreos/fedora-coreos-cincinnati/pull/75.

The only remaining stale bits are related/intertwined to actix-web, which requires a full porting effort. That is tracked separately at https://github.com/coreos/fedora-coreos-cincinnati/issues/78 thus I'm closing this.