Skip to content

chore(deps): update unmaintained dependency from kuchiki to kuchikiki - #7359

Merged
lucasfernog merged 3 commits into
tauri-apps:devfrom
davide-baldo:kuchiki-to-kuchikiki
Jul 5, 2023
Merged

chore(deps): update unmaintained dependency from kuchiki to kuchikiki#7359
lucasfernog merged 3 commits into
tauri-apps:devfrom
davide-baldo:kuchiki-to-kuchikiki

Conversation

@davide-baldo

@davide-baldo davide-baldo commented Jul 5, 2023

Copy link
Copy Markdown
Contributor

What kind of change does this PR introduce?

Kuchiki is an unmainted dependency, closes #6123 , closes #6411

Brave adopted kuchiki, renaming it to kuchikiki, this PR switched from kuchiki to kuchikiki and update html5ever to version 0.26 to align the 2 versions.

Does this PR introduce a breaking change?

No - As far I understand.

Checklist

  • When resolving issues, they are referenced in the PR's title (e.g fix: remove a typo, closes #___, #___)
  • A change file is added if any packages will require a version bump due to this PR per the instructions in the readme.
  • I have added a convincing reason for adding this feature, if necessary

Other information

Using an unmaintained dependency is risky as it allows for vulnerabilities to slip through old cracks, it also block upgrading other packages (html5ever in this case). It should be addressed as quickly as possible, since the price to migrate only increases over time.

@davide-baldo
davide-baldo requested a review from a team as a code owner July 5, 2023 13:04
@FabianLars

Copy link
Copy Markdown
Member

that's awesome! was waiting for someone to fork it and seeing a fork from a pretty big project is really nice to see 🥳

Comment thread core/tauri-utils/Cargo.toml Outdated
Comment thread tooling/cli/Cargo.toml Outdated
Comment thread core/tauri-utils/src/html.rs Outdated
Comment thread tooling/cli/src/helpers/web_dev_server.rs Outdated
@davide-baldo
davide-baldo force-pushed the kuchiki-to-kuchikiki branch from ccdee74 to 7630126 Compare July 5, 2023 15:43
amrbashir
amrbashir previously approved these changes Jul 5, 2023

@amrbashir amrbashir left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! but I will leave this one for @lucasfernog to merge

@lucasfernog
lucasfernog merged commit 43c6285 into tauri-apps:dev Jul 5, 2023
lucasfernog added a commit that referenced this pull request Jul 5, 2023
wusyong pushed a commit that referenced this pull request Jul 11, 2023
…#7359) (#7367)

Co-authored-by: Davide Baldo <davide@baldo.me>
Co-authored-by: Amr Bashir <amr.bashir2015@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RUSTSEC-2023-0019: kuchiki is unmaintained Kuchiki is unmaintained

4 participants