205-the-yaml-reader-takes-serde-saphyr-2

The YAML reader takes serde-saphyr 2.0

Lifecycle approvedImplementation completeVerification unknownQualification unknown

Spec 196 pinned `serde-saphyr` at `=1.3.0` and declined 2.0.0 because it had been published the day before. Dependabot #504 proposes 2.0.0 (with `granit-parser` 2.0.0 and `sha2` 0.11.1) and fails to compile: 2.0 deprecates the option 196's reader sets to refuse a non-finite float. This spec takes 2.0.0, sets the option's replacement to the same refusal, and moves the three `cargo vet` exemptions to the new versions. Every parity row 196 pinned holds unchanged.

Read the full pinned specification ↗

Relationships

depends on

196-yaml-parsing-moves-off-unsafe-libyaml

amends

196-yaml-parsing-moves-off-unsafe-libyaml

Claimed units

extends

{
  "nature": "corrective",
  "spec": "196-yaml-parsing-moves-off-unsafe-libyaml",
  "unit": {
    "kind": "file",
    "path": "crates/spec-spine-types/src/yaml.rs"
  }
}

extends

{
  "nature": "additive",
  "spec": "200-the-dependency-policy-has-an-owner-and-records",
  "unit": {
    "kind": "file",
    "path": "supply-chain/config.toml"
  }
}

Source headings

205: The YAML reader takes serde-saphyr 2.0
1. Purpose
2. Territory
3. Behavior
3.1 The pin
3.2 The non-finite refusal is set by its new name
3.3 The vet exemptions follow the versions
4. Out of scope
5. Resolved decisions
Verification

Frozen anchors

No frozen anchors declared.