alexcrichton / alexcrichton/curl-rust
Requiring OpenSSL 3.0.0 should be a breaking change
- Dominant language
- Rust
- Stars
- 1.1k
- Forks
- 258
- PR merge metrics
- No merged PRs in 30d
Description
curl-sys 0.4.85 switched to require OpenSSL 3.0.0 or greater. This should be a breaking change not a patch change. It means if you have an older version of OpenSSL, you can't use the `curl` crate with any version above 0.4.9 (which is when the crate switched to require `curl-sys` ^0.4) as cargo will select version `curl-sys` 0.4.85 which fails to build.
RHEL 8 images are pinned to the 1.1.1 version of OpenSSL and this won't ever be updated so effectively having the 3.0.0 requirement as a patch change means if you're on RHEL 8 you have to pin to `curl` 0.4.9 which was released 9 years ago - unless I'm missing something.
Would it be possible to yank the 0.4.85 release and re-release as 0.5.0? Then you could pin to a more recent downlevel version of `curl` on RHEL 8 and any other OSes which have older OpenSSL.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.