Hi Reinhard,

Did you see my message quoted below?

Kind regards,

 - Jonas


Quoting Jonas Smedegaard (2023-11-30 12:06:39)
> Quoting Reinhard Tartler (2023-10-03 14:06:11)
> > I believe all dependencies are now in sid:
> > 
> > - https://tracker.debian.org/pkg/rust-prettyplease
> > - https://tracker.debian.org/pkg/rust-hyper-timeout
> > 
> > anything else that is missing?
> 
> axum really needs tower-http (bug#1053599) - I tried patching around it,
> but the rabbit hole goes deeper than I am willing to dig.
> 
> Other axum dependencies I've patched around, but at least some of them
> seem to weaken security, so I really recommend to keep the dependencies
> covered and up-to-date (Rust team generally seem reluctant to maintain
> packages, and I have made part of standard routine to file bugreports
> whenever I notice a crate lagging behind).  Rust team should already be
> working on cookie and maybe also serde_html_form, but I don't think
> anyone is working on either tower-http or tokio-tungstenite:
> https://salsa.debian.org/debian/rust-axum/-/tree/debian/latest/debian/patches
> 
>  - Jonas
> 
> -- 
>  * Jonas Smedegaard - idealist & Internet-arkitekt
>  * Tlf.: +45 40843136  Website: http://dr.jones.dk/
>  * Sponsorship: https://ko-fi.com/drjones
> 
>  [x] quote me freely  [ ] ask before reusing  [ ] keep private

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

Attachment: signature.asc
Description: signature

Reply via email to