Severity 1110778 important
Thanks
On 12/08/2025 18:58, Matthias Geiger wrote:
On Tue, 12 Aug 2025 15:12:27 +0100 Peter Michael Green <[email protected]>
wrote:
severity 1110778 serious
thanks
I've fixed this package up so it doesn't block the rustls-webpki update
but I agree it should probably not be in forky, so I am bumping this
up to serious.
If someone wants to keep this package please speak up now.
unless I missed something, librust-async-tungstenite still Depends: on it ?
https://sources.debian.org/src/rust-async-tungstenite/0.28.2-1/Cargo.toml#L128
I packaged it as dependency for async-tungestenite; no objections for a removal
otherwise.
Thanks for spotting what Jonas and I missed.
The dependency is optional, but said optional dependency *is* used
by rust-magic-wormhole.
I was about to file a bug about this upstream, but I hesistated because
frankly futures-rustls doesn't look much better maintained than
async-tls. Yes, right now it uses current rustls upstream (whereas
async-tls is patched in Debian to use current rustls) but it's
last release was still a year ago.
Further looking at the git history it looks like about a month after
the last release the author tried to make another one but
did not go through with it for unknown reasons and there has
been little activity since.