search

mozilla / cbindgen

A project for generating C bindings from Rust code
Mozilla Public License 2.0
2.29k stars 294 forks source link

Need to update indexmap dependency to 2.x (sub-dependency ahash crate version has been yanked) #893

Closed keehun closed 8 months ago

keehun commented 8 months ago

This afternoon, ahash crate versions below 0.8.4 were yanked. This poses a problem for those of us who enforce strict checks on yanked crates (for example, with cargo-deny).

The ahash crate is pulled in via indexmap = "1" (more specifically, version 1.9.3).

Newer versions of indexmap (now up to 2.0.2) will pull latest ahash (0.8.5 at the time of writing) which resolves this issue.

It would be fantastic if cbindgen could update to indexmap = "2".

keehun commented 8 months ago

ahash has since released 0.7.7 to fix this issue. Please run cargo update -p ahash to update your ahash dependencies.