#22905: Cargo.lock and Cargo.toml specify incompatible dependencies for libc -----------------------------+-------------------------- Reporter: isis | Owner: Type: defect | Status: new Priority: Medium | Milestone: Component: Core Tor/Tor | Version: Severity: Normal | Resolution: Keywords: rust, tor-build | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: SponsorZ -----------------------------+--------------------------
Comment (by Sebastian): The Cargo.lock file is committed on purpose, because we want reproducible builds. In our setup we're building an "internal" library, not something other people would pull in from crates.io. The reason we're using "*" is that dependency updates are manual always (they include vendoring a new thing) so accidental updates should be impossible, unless I'm missing something here. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22905#comment:3> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs