Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

msrv raised by indirect dependency on serde #3

Closed
victorjulien opened this issue Aug 12, 2022 · 3 comments
Closed

msrv raised by indirect dependency on serde #3

victorjulien opened this issue Aug 12, 2022 · 3 comments

Comments

@victorjulien
Copy link

Through the indirect dependency on serde, the MSRV is getting a significant bump. Sadly, the serde project doesn't seem to care (see serde-rs/serde#2255)

├── sawp-modbus v0.11.1
│   ├── nom v5.1.2 (*)
│   ├── num_enum v0.5.7
│   │   └── num_enum_derive v0.5.7 (proc-macro)
│   │       ├── proc-macro-crate v1.1.0
│   │       │   ├── thiserror v1.0.32
│   │       │   │   └── thiserror-impl v1.0.32 (proc-macro)
│   │       │   │       ├── proc-macro2 v1.0.43 (*)
│   │       │   │       ├── quote v1.0.21 (*)
│   │       │   │       └── syn v1.0.99 (*)
│   │       │   └── toml v0.5.9
│   │       │       └── serde v1.0.143
│   │       ├── proc-macro2 v1.0.43 (*)
│   │       ├── quote v1.0.21 (*)
│   │       └── syn v1.0.99 (*)
│   ├── sawp v0.11.1 (*)
│   └── sawp-flags v0.11.1
│       └── sawp-flags-derive v0.11.1 (proc-macro)
│           ├── proc-macro-crate v1.1.0 (*)
│           ├── proc-macro2 v1.0.43 (*)
│           ├── quote v1.0.21 (*)
│           └── syn v1.0.99 (*)
@cccs-wecorre
Copy link
Contributor

Hello, we are currently investigating this and a similar issue with an indirect dependency from Criterion. We are committed to keeping our MSRV in-line with Suricata.

@victorjulien
Copy link
Author

Thanks for looking into this!

2 things:

  1. serde did address the issue, but is still vague about a MSRV commitment in general
  2. in Suricata, for the upcoming 7 release, we bumped to 1.58. This excludes current Debian Stable, but we felt this started to lag too much to consider (https://redmine.openinfosecfoundation.org/issues/4163#note-17)

@cccs-wecorre
Copy link
Contributor

Closing since Serde has addressed the issue. Our internal CI will strictly check MSRV requirements to try and catch these issues earlier.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants