theupdateframework / theupdateframework/rust-tuf
Dependency issue, untrusted = "^0.5"
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 198
- Forks
- 39
- Avg merge
- 9h 19m
- Merged PRs (30d)
- 2
Description
I was attempting to try out rust-tuf in an application,
In my Cargo.toml under dependencies, i tried both
tuf = "0.3.0-alpha3" and tuf = "0.2.0" both with the same issue.
error: failed to select a version for the requirement `untrusted = "^0.5"`
candidate versions found which didn't match: 0.7.0, 0.6.2
location searched: crates.io index
required by package `tuf v0.3.0-alpha3`
... which is depended on by `demo_tuf v0.1.0 (/home/charles/code/rust/demo_tuf)`
any idea where i should go from here ?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the dependency declarations in Cargo.toml and reproduce the reported Cargo resolution error using the tuf versions and untrusted constraint shown in the issue. Check which dependency versions are available from crates.io; done means the reported tuf versions resolve successfully without the untrusted version-selection error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100