• sapient [they/them]
    link
    4
    edit-2
    10 months ago

    I’ve been pinning my projects with the code in https://github.com/rust-lang/miri/pull/3032

    In particular, the important part is:

    # Pin a version of serde without intransparent unreproducible binary blobs.
    serde = { version = "1.0, <1.0.172", features = ["derive"] }
    

    Which both avoids the conflicts an =version pin would produce and ensures all your dependencies with ranged serde versions will use a version without the binary if possible .