Skip to content

fix: replace unmaintained YAML dependencies - #839

Open
randlee wants to merge 1 commit into
fix/lint-test-boundaryfrom
fix/yaml-advisory
Open

randlee wants to merge 1 commit into
fix/lint-test-boundaryfrom
fix/yaml-advisory

Conversation

@randlee

@randlee randlee commented Nov 3, 2026

Copy link
Copy Markdown
Owner

Replace archived serde_yaml/unsafe-libyaml with the YAML organization maintained yaml_serde/libyaml-rs fork. The parser lineage still uses unsafe Rust; this addresses the unmaintained dependency rather than claiming an unsafe-free parser.

A 2,056-case snapshot corpus records values and full error strings from serde_yaml 0.9.34 for tracked YAML and frontmatter files and extracted YAML-related Rust literals. Differential test, workspace tests, Clippy, workspace build and just test pass. cargo deny --all-features now reports only the separate basic-toml advisory.

@randlee
randlee added this pull request to stack #825 November 3, 2026 19:32

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant