Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No tag for sha-1 v0.10.1 #576

Closed
paolobarbolini opened this issue Mar 31, 2024 · 2 comments
Closed

No tag for sha-1 v0.10.1 #576

paolobarbolini opened this issue Mar 31, 2024 · 2 comments

Comments

@paolobarbolini
Copy link

paolobarbolini commented Mar 31, 2024

Weirdly the repository contains tags for v0.10.0 and v0.10.3, but the latest version is v0.10.1 🤷‍♂️.

Because the crates.io release doesn't contain .cargo_vcs_info.json, most likely because of cargo publish --allow-dirty, it is NOT currently possible to verify that the crates.io release can be reproduced from the contents of the repository using completely automated steps.

@newpavlov
Copy link
Member

newpavlov commented Mar 31, 2024

sha-1 v0.10.1 was published as part of fixing #438. It was done out of tree (since master tracks sha1), so no tag was created. We probably can amend this by branching from a master commit with date closest to the date of publishing and reproducing the crate changes (mostly adding the deprecation notice).

@newpavlov
Copy link
Member

Added sha-1-v0.10.1 tag. cargo googles did not find any issues with it (though it did not like digest and crypto-common, we probably should look into it later).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants