Skip to content

Conversation

@dlukegordon
Copy link
Contributor

Description

We are getting failing cargo-deny actions on this repo due to the number_prefix crate being marked unmaintained:

error[unmaintained]: number_prefix crate is unmaintained
    ┌─ /home/runner/work/sui/sui/Cargo.lock:774:1
    │
774 │ number_prefix 0.4.0 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
    │
    ├ ID: RUSTSEC-2025-0119
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2025-0119
    ├ The `number_prefix` crate is no longer actively maintained.  If you rely on this crate, consider switching to a recommended alternative.
      
      ## Recommended alternatives
      
      - [`unit-prefix`](https://crates.io/crates/unit-prefix)
    ├ Announcement: https://github.com/ogham/rust-number-prefix/pull/8
    ├ Solution: No safe upgrade is available!

This is a dep of indicatif. It's on 0.17.2 but the latest version is 0.18.3.

The latest version doesn't appear to use number_prefix, so bumping the version should fix the issue.

Test plan

How did you test the new or updated feature?


Release notes

Check each box that your changes affect. If none of the boxes relate to your changes, release notes aren't required.

For each box you select, include information after the relevant heading that describes the impact of your changes that a user might notice and any actions they must take to implement updates.

  • Protocol:
  • Nodes (Validators and Full nodes):
  • gRPC:
  • JSON-RPC:
  • GraphQL:
  • CLI:
  • Rust SDK:
  • Indexing Framework:

@dlukegordon dlukegordon temporarily deployed to sui-typescript-aws-kms-test-env November 19, 2025 18:36 — with GitHub Actions Inactive
@vercel
Copy link

vercel bot commented Nov 19, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments
Project Deployment Preview Comments Updated (UTC)
multisig-toolkit Ignored Ignored Nov 19, 2025 6:36pm
sui-kiosk Ignored Ignored Nov 19, 2025 6:36pm

@dlukegordon dlukegordon enabled auto-merge (squash) November 19, 2025 19:20
@dlukegordon dlukegordon merged commit 23f6e0e into main Nov 19, 2025
70 of 71 checks passed
@dlukegordon dlukegordon deleted the lukegordon/bump-indicatif branch November 19, 2025 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants