Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug: Checking for yanked crates fails with local registry #667

Closed
sgasse opened this issue Jun 18, 2024 · 0 comments · Fixed by #668
Closed

Bug: Checking for yanked crates fails with local registry #667

sgasse opened this issue Jun 18, 2024 · 0 comments · Fixed by #668
Labels
bug Something isn't working

Comments

@sgasse
Copy link

sgasse commented Jun 18, 2024

Describe the bug

When using a local registry mirror setup with cargo-local-registry, cargo deny check fails to check for yanked versions.

To reproduce

  1. Install cargo-local-registry
  2. Run cargo local-registry --sync Cargo.lock registry
  3. Update .cargo/config.toml according to the instructions, replacing crates.io with the local registry
  4. Run cargo deny check

Every dependency will be reported with something like this:

warning[index-failure]: unable to check for yanked crates
   ┌─ /<censored>/workspace/examples/local_reg_yanked/Cargo.lock:15:1
   │
15 │ tokio 1.38.0 registry+https://github.com/rust-lang/crates.io-index
   │ ------------------------------------------------------------------ crate whose registry we failed to query
   │
   = the url '/<censored>/workspace/examples/local_reg_yanked/registry' is invalid
   = tokio v1.38.0
     └── local_reg_yanked v0.1.0

cargo-deny version

0.14.24

What OS were you running cargo-deny on?

Linux

Additional context

I don't know if a local registry mirror created with cargo-local-registry theoretically contains the information about yanked crates. If so, did the way cargo deny queries for it change? I think this still worked a while back with the same local registry setup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant