Ignore unresolvable glib Dependabot update#15
Draft
dashenbibi wants to merge 1 commit into
Draft
Conversation
Signed-off-by: dashenbibi <15820727+dashenbibi@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
glibupdates for the Cargo workspace;Why
Dependabot security update run 29904771188 fails with
security_update_not_possible: Tauri 2's Linux-only GTK3 dependency requiresglib ^0.18, while GHSA-wrw7-89jp-8q8g is fixed only inglib >=0.20. No resolvable lockfile update exists.The current TestHarbor release target is macOS. Neither macOS Rust target includes
glib, and the packaged macOS binary does not link GTK or glib. This exception must be reconsidered before enabling Linux support.Impact
Cargo.lockor dismiss the underlying security alert.Verification
.github/dependabot.ymlas YAML;glibignore rule;git diff --checkpassed;cargo update -p glib --precise 0.20.0 --dry-run.