search

private-attribution / ipa

A raw implementation of Interoperable Private Attribution
MIT License
42 stars 25 forks source link

Upgrade HTTP dependency stack (hyper, rustls, axum, etc) #924

Open akoshelev opened 10 months ago

akoshelev commented 10 months ago

Hyper advanced past version 1.0 and we started lagging behind in terms of features/bug fixes for our dependency stack. Axum is past 0.5 version too and upgrading to it requires some heavylifting (I tried and failed spectacularly).

rustls - same story. 0.22 had major breaking changes so the longer we want, the harder it gets to upgrade.

Thing that causes me the most pain is axum-server. It pins pretty much every HTTP(S) dependency but moves slower. So it is currently blocking rustls upgrade.

Ideally I would minimize the number of crates we use for our web stack. Hyper, Tower and rustls should be sufficient to do what we do (unless I am missing something). But at absolute minimum we should move to Hyper 1.0+ and upgrade other dependencies.

cberkhoff commented 5 months ago

private-attribution/ipa#1095 Closes this issue