Skip to content

Commit

Permalink
Server: remove rustix via clap bump (#1110)
Browse files Browse the repository at this point in the history
Same boat for `svix-server` as with `svix-bridge` in #1109

Bumping clap removes the sole runtime dependency on `rustix`, but it
still exists in the dep tree impacting only compile-time code paths.

```
$ cargo tree -p [email protected] -i
rustix v0.38.4
└── tempfile v3.7.0
    β”œβ”€β”€ figment v0.10.10
    β”‚   └── svix-server v1.13.0 (/home/onelson/Projects/svix-webhooks/server/svix-server)
    β”œβ”€β”€ prost-build v0.9.0
    β”‚   └── tonic-build v0.6.2
    β”‚       [build-dependencies]
    β”‚       └── opentelemetry-otlp v0.10.0
    β”‚           └── svix-server v1.13.0 (/home/onelson/Projects/svix-webhooks/server/svix-server)
    └── sqlx-macros-core v0.7.1
        └── sqlx-macros v0.7.1 (proc-macro)
            └── sqlx v0.7.1
                β”œβ”€β”€ sea-orm v0.12.2
                β”‚   └── svix-server v1.13.0 (/home/onelson/Projects/svix-webhooks/server/svix-server)
                β”œβ”€β”€ sea-query-binder v0.5.0
                β”‚   └── sea-orm v0.12.2 (*)
                └── svix-server v1.13.0 (/home/onelson/Projects/svix-webhooks/server/svix-server)
```

Updating sea-orm, and otel-related deps will help get the affected
`rustix` version out of our tree entirely, but it's a larger lift.

Refs: https://github.com/svix/svix-webhooks/security/dependabot/74
  • Loading branch information
svix-onelson authored Oct 19, 2023
2 parents 81fcc24 + 4fc120a commit 431c98f
Showing 1 changed file with 10 additions and 23 deletions.
33 changes: 10 additions & 23 deletions server/Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

0 comments on commit 431c98f

Please sign in to comment.