Pricefield | Lemmy
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
ruffsl to [email protected]English • 2 years ago

Rust devs push back as Serde project ships precompiled binaries

www.bleepingcomputer.com

external-link
message-square
16
fedilink
  • cross-posted to:
  • [email protected]
  • [email protected]
  • [email protected]
  • [email protected]
  • [email protected]
50
external-link

Rust devs push back as Serde project ships precompiled binaries

www.bleepingcomputer.com

ruffsl to [email protected]English • 2 years ago
message-square
16
fedilink
  • cross-posted to:
  • [email protected]
  • [email protected]
  • [email protected]
  • [email protected]
  • [email protected]
  • sapient [they/them]
    link
    fedilink
    5•
    edit-2
    2 years ago

    I’ve been pinning my projects with the code in https://github.com/rust-lang/miri/pull/3032

    In particular, the important part is:

    # Pin a version of serde without intransparent unreproducible binary blobs.
    serde = { version = "1.0, <1.0.172", features = ["derive"] }
    

    Which both avoids the conflicts an =version pin would produce and ensures all your dependencies with ranged serde versions will use a version without the binary if possible .

    • sapient [they/them]
      link
      fedilink
      3•
      edit-2
      2 years ago

      “&lt;” should be a less-than sign, but it gets delimited into HTML magic character codes for some reason but only inside a code block? >.<

      • @[email protected]
        link
        fedilink
        3•2 years ago

        Yeah, I’ve noticed this happening elsewhere on Lemmy instances, too.

    • @[email protected]
      link
      fedilink
      English
      4•
      edit-2
      2 years ago

      The developer has agreed to remove the precomputed binary in v1.0.184:

      https://github.com/serde-rs/serde/releases/tag/v1.0.184

      • sapient [they/them]
        link
        fedilink
        2•2 years ago

        Awesome!

        Gotta figure a way to avoid the specific versions but I’m glad they relented .

[email protected]

[email protected]
Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

Welcome to the Rust community! This is a place to discuss about the Rust programming language.

Wormhole

[email protected]

Credits
  • The icon is a modified version of the official rust logo (changing the colors to a gradient and black background)
  • 1 user / day
  • 23 users / week
  • 61 users / month
  • 346 users / 6 months
  • 2 subscribers
  • 968 Posts
  • 4.58K Comments
  • Modlog
  • mods:
  • snowe
  • Ategon
  • EdTheLegendary
  • @[email protected]
  • @[email protected]
  • UI: 0.18.4
  • BE: 0.18.2
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org