anvilsign in

collin/anvil · 0b6dde80

Drop the unused tower-http dependency; record why rand cannot follow

Collin Richards · 2026-08-25 06:24 UTC · 0b6dde80385d8702e84952fc4ec615c6926d5702 · parent e7d9ab24 · browse files

modifiedCargo.lock+1 −44
⋯ 281 unchanged lines
282282 "tokio",
283283 "tokio-util",
284284 "tower",
285- "tower-http 0.7.0",
286285 "tracing",
287286 ]
288287
⋯ 2233 unchanged lines
25222521 ]
25232522
25242523 [[package]]
2525-name = "http-range-header"
2526-version = "0.4.2"
2527-source = "registry+https://github.com/rust-lang/crates.io-index"
2528-checksum = "9171a2ea8a68358193d15dd5d70c1c10a2afc3e7e4c5bc92bc9f025cebd7359c"
2529-
2530-[[package]]
25312524 name = "httparse"
25322525 version = "1.10.1"
25332526 source = "registry+https://github.com/rust-lang/crates.io-index"
⋯ 612 unchanged lines
31463139 checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
31473140
31483141 [[package]]
3149-name = "mime_guess"
3150-version = "2.0.5"
3151-source = "registry+https://github.com/rust-lang/crates.io-index"
3152-checksum = "f7c44f8e672c00fe5308fa235f821cb4198414e1c77935c1ab6948d3fd78550e"
3153-dependencies = [
3154- "mime",
3155- "unicase",
3156-]
3157-
3158-[[package]]
31593142 name = "miniz_oxide"
31603143 version = "0.8.9"
31613144 source = "registry+https://github.com/rust-lang/crates.io-index"
⋯ 757 unchanged lines
39193902 "tokio",
39203903 "tokio-rustls",
39213904 "tower",
3922- "tower-http 0.6.11",
3905+ "tower-http",
39233906 "tower-service",
39243907 "url",
39253908 "wasm-bindgen",
⋯ 1310 unchanged lines
52365219 "tower-layer",
52375220 "tower-service",
52385221 "url",
5239-]
5240-
5241-[[package]]
5242-name = "tower-http"
5243-version = "0.7.0"
5244-source = "registry+https://github.com/rust-lang/crates.io-index"
5245-checksum = "b11f75e912b0c2be01b63d8cf8057b8c3f97cf34abb3d431a3a4c8675498e233"
5246-dependencies = [
5247- "bitflags 2.13.1",
5248- "bytes",
5249- "futures-core",
5250- "futures-util",
5251- "http",
5252- "http-body",
5253- "http-body-util",
5254- "http-range-header",
5255- "httpdate",
5256- "mime",
5257- "mime_guess",
5258- "percent-encoding",
5259- "pin-project-lite",
5260- "tokio",
5261- "tokio-util",
5262- "tower-layer",
5263- "tower-service",
5264- "tracing",
52655222 ]
52665223
52675224 [[package]]
⋯ 733 unchanged lines
modifiedCargo.toml+0 −1
⋯ 119 unchanged lines
120120 tokio-util = { version = "0.7", features = ["io"] }
121121 toml = { version = "1.1.4" }
122122 tower = { version = "0.5" }
123-tower-http = { version = "0.7.0", features = ["trace", "fs"] }
124123 tracing = { version = "0.1" }
125124 tracing-subscriber = { version = "0.3", features = ["env-filter"] }
modifiedclippy.toml+9 −2
⋯ 25 unchanged lines
2626 "sha3",
2727
2828 # --- Held by direct dependencies of ours ------------------------------
29- "tower-http", # reqwest 0.13 uses 0.6 internally; we are on 0.7.
3029 "hashlink", # rusqlite 0.40 moved to 0.12; something older wants 0.11.
30+ "rand", # axum's websockets are on 0.9; ssh-key needs rand_core 0.10,
31+ # so we cannot meet them — see the note below.
3132 # `base64` used to sit here: we were on 0.23 and axum 0.8 on 0.22. We hold
3233 # at 0.22 to match axum rather than carry two copies — 0.23 bought us
3334 # nothing we use, so the duplicate was the whole cost. Revisit when axum
34- # moves.
35+ # moves. `tower-http` also used to sit here and turned out to be declared
36+ # and never used at all, so it left with the dependency.
37+ #
38+ # `rand` is the case where meeting in the middle does not work: axum's
39+ # websockets pull 0.9, but ssh-key rc.11 will only take an RNG on
40+ # rand_core 0.10, which is rand 0.10. Downgrading trades one duplicate for
41+ # a compile error, so this one waits for axum.
3542
3643 # --- Entirely inside other crates' trees ------------------------------
3744 "bitflags", # 1.x lingers under a few transitive crates.
⋯ 7 unchanged lines
modifiedcrates/anvil-web/Cargo.toml+0 −1
⋯ 20 unchanged lines
2121 futures-util.workspace = true
2222 tokio.workspace = true
2323 tokio-util.workspace = true
24-tower-http.workspace = true
2524 tracing.workspace = true
2625 serde.workspace = true
2726 serde_json.workspace = true
⋯ 27 unchanged lines