Quoting Blair Noctis (2024-10-13 09:53:33) > Source: rust-rustls > Version: 0.21.12-5 > Severity: wishlist > X-Debbugs-Cc: n...@debian.org > > Might be a bit involved as it's closely related to the http or Web stack. > (http > and other base crates, clients like reqwest, servers like axum, etc.)
Thanks for reporting this issue, thereby opening a conversation on how to best approach it. Because agreed, this is potentially complex, due to entanglement of multiple related projects deeply embedded in the Rust ecosystem. What I intend on doing is to not (only) bump the version, but for a while maintain dual branches of the crate rustls, to not force all reverse dependencies to all change at once. Possibly it turns out that there is no benefit - maybe the entanglement is so large that in practice all or most packages effectively need to migrate at once anyway, but I suspect that there is wiggle room, and I would like to explore that. More detailed (since you asked for that in bug#1084138), my plan is...: 1. release src:rust-rustls v0.23 to experimental 2. release new src:rust-rustls-0.21 to (experimental and then) unstable 3. upgrade packages to use src:rust-rustls v0.23 in experimental 4. move src:rust-rustls v0.23 to unstable if 3) seems fruitful 5. deprecate src:rust-rustls-0.21 when no longer viable to maintain Time will tell the pace of each step, and whether it stalls at 3). - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ * Sponsorship: https://ko-fi.com/drjones [x] quote me freely [ ] ask before reusing [ ] keep private
