CMake Part 1 – The Dark Arts

Re:CMake Part 1 – The Dark Arts by yakubin on Saturday July 10, 2021 @05:07AM (#27792157)

> As for Cargo, [...] I also found it unusable because it provided no way to check for the hash or signature of the dependencies that it downloads.

Afaik Cargo does it out of the box, based on Cargo.lock.

UPDATE: This doc page seems to confirm that: <https://doc.rust-lang.org/cargo/guide/cargo-toml-vs-cargo-lo...>

[ Parent | on HN ]

Re:CMake Part 1 – The Dark Arts by h_anna_h on Saturday July 10, 2021 @05:49AM (#27792311)

I did not know about rev, thanks. Though, since there is no way to specify a signature you are forced to use potentially outdated packages.

[ Parent | on HN ]

Re:CMake Part 1 – The Dark Arts by yakubin on Saturday July 10, 2021 @06:11AM (#27792398)

"cargo update" will update the packages along with Cargo.lock content. As for not updating them without a manual trigger, I consider it a feature, but I guess it's a matter of opinion.

[ Parent | on HN ]

Re:CMake Part 1 – The Dark Arts by h_anna_h on Saturday July 10, 2021 @02:22PM (#27795355)

> "cargo update" will update the packages along with Cargo.lock content

Disregarding the rev attribute?

[ Parent | on HN ]

Re:CMake Part 1 – The Dark Arts by yakubin on Saturday July 10, 2021 @06:10PM (#27796822)

This is the entire point of this command. It will update the rev attribute. What else would it be for?

[ Parent | on HN ]