Skip to content

feat: Script to check packaged dependency trees for duplicate which would likely cause issues#337

Closed
86667 wants to merge 1 commit intomainfrom
check_crate_deps_script
Closed

feat: Script to check packaged dependency trees for duplicate which would likely cause issues#337
86667 wants to merge 1 commit intomainfrom
check_crate_deps_script

Conversation

@86667
Copy link
Contributor

@86667 86667 commented Mar 3, 2026

Output for pubky:

$ ./.scripts/check-crate-deps.sh pubky                                                                                                                              (main✱) 
Packaging pubky to check for dependency conflicts...
Checking packaged Cargo.lock for critical dependency conflicts...
Error: Multiple pkarr versions detected in packaged crate!
name = "pkarr"
version = "3.10.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
--
name = "pkarr"
version = "5.0.3"
source = "registry+https://github.com/rust-lang/crates.io-index"

This will cause runtime failures (DHT communication, type mismatches).

The conflict comes from published crates.io versions (not local path deps).
Check which dependency versions are specified in Cargo.toml files, then verify
what versions those published crates use on crates.io.

To fix: publish updated versions of the dependent crates with consistent
dependency versions, then update this crate's Cargo.toml to use those versions.

@86667
Copy link
Contributor Author

86667 commented Mar 4, 2026

No longer needed.

@86667 86667 closed this Mar 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant