You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We are cross-referencing this field with cargo metadata, which starting with Rust 1.77 outputs cargo pkgid as its package ID representation (at least according to the docs).
We'll need to investigate how cargo pkgid/cargo metadata handle URL-encoding of source parameters and make sure it agrees with the Cargo.lock representation, or work around the discrepancy if it doesn't.
The text was updated successfully, but these errors were encountered:
Shnatsel
changed the title
Hashes for packages from registries with parameters in the URL may not be recorded correctly
Hashes for packages from registries with parameters in the URL may not be recorded
Feb 26, 2024
Cargo.lock does not URL-encode URL parameters in
source
field correctly right now. A v4Cargo.lock
format is expected to ship sometime soon, fixing that.We are cross-referencing this field with
cargo metadata
, which starting with Rust 1.77 outputscargo pkgid
as its package ID representation (at least according to the docs).We'll need to investigate how
cargo pkgid
/cargo metadata
handle URL-encoding of source parameters and make sure it agrees with the Cargo.lock representation, or work around the discrepancy if it doesn't.The text was updated successfully, but these errors were encountered: