Files
meilisearch/.github/templates/dependency-issue.md
2025-07-20 22:11:30 +02:00

2.4 KiB

This issue is about updating Meilisearch dependencies:

  • Update Meilisearch dependencies with the help of cargo +nightly udeps --all-targets (remove unused dependencies) and cargo upgrade (upgrade dependencies versions) - ⚠️ Some repositories may contain subdirectories (like heed, charabia, or deserr). Take care of updating these in the main crate as well. This won't be done automatically by cargo upgrade.
  • If new Rust versions have been released, update the minimal Rust version in use at Meilisearch:
    • in this GitHub Action file, by changing the toolchain field of the rustfmt job to the latest available nightly (of the day before or the current day).
    • in every GitHub Action files, by changing all the dtolnay/rust-toolchain@ references to use the latest stable version.
    • in this rust-toolchain.toml, by changing the channel field to the latest stable version.
    • in the Dockerfile, by changing the base image to rust:<target_rust_version>-alpine<alpine_version>. Check that the image exists on Dockerhub. Also, build and run the image to check everything still works!

⚠️ This issue should be prioritized to avoid any deprecation and vulnerability issues.

The GitHub action dependencies are managed by Dependabot, so no need to update them when solving this issue.