nabijaczleweli / cargo-update

A cargo subcommand for checking and applying updates to installed executables
MIT License
1.22k stars 42 forks source link

Options to update dependencies to "at least X days old" #200

Closed RCasatta closed 2 years ago

RCasatta commented 2 years ago

I would like to update dependencies to a version that is at least X days old as a measure to avoid flagrantly hijacked projects.

nabijaczleweli commented 2 years ago

Dependencies?

RCasatta commented 2 years ago

Yes,

Example: my project has in Cargo.toml

[dependencies]
coollib=0.1

And a Cargo.lock with the same version.

coollib 0.2 is released 30 days ago. coollib 0.3 is released yesterday.

I would like to use something like:

cargo update --older 10d

And the Cargo.lock will update to coollib 0.2 because 0.3 is too recent

nabijaczleweli commented 2 years ago

bruh

RCasatta commented 2 years ago

Thanks and sorry for wrong posting