Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Announce change in Cargo.lock policy #1135

Merged
merged 5 commits into from
Aug 29, 2023
Merged

Announce change in Cargo.lock policy #1135

merged 5 commits into from
Aug 29, 2023

Conversation

epage
Copy link
Contributor

@epage epage commented Aug 25, 2023

As the policy dates back to at least 2017, the Cargo team felt it would be good to ensure there was visibility on this policy change.

@CryZe
Copy link
Contributor

CryZe commented Aug 25, 2023

Wouldn't the better recommendation be to let CI publish the Cargo.lock as an artifact? Having the Cargo.lock committed causes problems with Dependabot and will make CI test against outdated versions, meaning you won't know if your crate even builds properly if someone cargo adds it. These seem like huge downsides.

@epage
Copy link
Contributor Author

epage commented Aug 25, 2023

Might be better to focus conversations on the policy change to the issue where it was discussed and FCPed, see rust-lang/cargo#8728

@ehuss ehuss merged commit 9aee55c into rust-lang:master Aug 29, 2023
2 checks passed
@epage epage deleted the lock branch August 29, 2023 18:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants