Closed leonardohn closed 2 years ago
merged via gentoo infra git, thanks!
Does it make sense to add an useflag in case the user wants to use system's libgit2?
nah, it always breaks abi, cargo-ebuild infrequently updated, chances for breakage are high. and I don't want to introduce a lower-bound version dep, because it will block libgit2 removals.
we had rust/cargo itself using system one, but it will be unable to update itself if libgit2 changes abi (with USE=system-bootstrap) so I forced using bundled one there too. that's unfortunate, but is more stable. not that we are using blobs, just bundled stuff, it's still built from source.
Libgit2 often goes through ABI changes, so most projects (including rustsec, used for the audit feature) are vendoring it by default. This commit adds the
vendored-libgit2
feature on the rustsec crate, which closes #20.