Why need to upgrade rust-version at the same time when upgrading the fd version?

sharkdp / fd

A simple, fast and user-friendly alternative to 'find'

Apache License 2.0

34.25k stars 816 forks source link

Why need to upgrade rust-version at the same time when upgrading the fd version? #1559

Closed bin-ly closed 6 months ago

bin-ly commented 6 months ago

The code difference between fd9.0.0 version and fd10.1.0 version does not seem to be very big (I have not yet studied whether the adjusted code uses the functions provided by higher version dependencies), but some package dependencies and The rust version has been upgraded (1.70.0->1.77.2). What is the reason for this? Without extensive adjustments, my rust1.70.0 can also compile fd10.1.0 without requiring me to re-download rust1.77.2, which is more convenient for me.

tmccombs commented 6 months ago

Because of https://blog.rust-lang.org/2024/04/09/cve-2024-24576.html

If you aren't on windows, and it compiles with 1.70, then sure, compile it with 1.70.