Mirrors/chatmail-core
1
0
Fork 0
mirror of https://github.com/chatmail/core.git synced 2026-09-22 13:01:21 +03:00
Code Issues Packages Projects Releases Wiki Activity

docs: always suggest using --locked with "cargo install"

Browse Source 
Otherwise the lockfile is completely ignored
as <https://doc.rust-lang.org/cargo/commands/cargo-install.html#dealing-with-the-lockfile>
says "By default, the Cargo.lock file that is included with the package will be ignored."

Mostly a reaction to <https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/>
This commit is contained in:
link2xt
2026-08-20 12:50:03 +00:00
committed by l
parent 357c6e74d5
commit f09f8fd8a4
4 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@@ -167,7 +167,7 @@ $ cargo test -- --ignored
Install [`cargo-bolero`](https://github.com/camshaft/bolero) with Install [`cargo-bolero`](https://github.com/camshaft/bolero) with
```sh ```sh
$ cargo install cargo-bolero $ cargo install --locked cargo-bolero
``` ```
Run fuzzing tests with Run fuzzing tests with

2
deltachat-rpc-server/README.md
View File

@@ -11,7 +11,7 @@ Rename the downloaded binary to `deltachat-rpc-server` and add it to your `PATH`
To install from source run: To install from source run:
```sh ```sh
cargo install --git https://github.com/chatmail/core/ deltachat-rpc-server cargo install --locked --git https://github.com/chatmail/core/ deltachat-rpc-server
``` ```
The `deltachat-rpc-server` executable will be installed into `$HOME/.cargo/bin` that should be available The `deltachat-rpc-server` executable will be installed into `$HOME/.cargo/bin` that should be available

2
deltachat-rpc-server/npm-package/src/errors.js
View File

@@ -2,7 +2,7 @@
import { ENV_VAR_NAME } from "./const.js"; import { ENV_VAR_NAME } from "./const.js";
const cargoInstallCommand = const cargoInstallCommand =
"cargo install --git https://github.com/chatmail/core deltachat-rpc-server"; "cargo install --locked --git https://github.com/chatmail/core deltachat-rpc-server";
export function NPM_NOT_FOUND_SUPPORTED_PLATFORM_ERROR(package_name) { export function NPM_NOT_FOUND_SUPPORTED_PLATFORM_ERROR(package_name) {
return `deltachat-rpc-server not found: return `deltachat-rpc-server not found:

2
python/doc/jsonrpc/install.rst
View File

@@ -17,7 +17,7 @@ Install ``deltachat-rpc-server``
To get ``deltachat-rpc-server`` binary you have three options: To get ``deltachat-rpc-server`` binary you have three options:
1. Install ``deltachat-rpc-server`` from PyPI using ``pip install deltachat-rpc-server``. 1. Install ``deltachat-rpc-server`` from PyPI using ``pip install deltachat-rpc-server``.
2. Build and install ``deltachat-rpc-server`` from source with ``cargo install --git https://github.com/chatmail/core/ deltachat-rpc-server``. 2. Build and install ``deltachat-rpc-server`` from source with ``cargo install --locked --git https://github.com/chatmail/core/ deltachat-rpc-server``.
3. Download prebuilt release from https://github.com/chatmail/core/releases and install it into ``PATH``. 3. Download prebuilt release from https://github.com/chatmail/core/releases and install it into ``PATH``.
Check that ``deltachat-rpc-server`` is installed and can run:: Check that ``deltachat-rpc-server`` is installed and can run::