Skip to content

rsass-cli: bump version to match library (0.29.3-PRE)#215

Open
dustinkirkland wants to merge 1 commit into
kaj:mainfrom
dustinkirkland:fix-rsass-cli-version-bump
Open

rsass-cli: bump version to match library (0.29.3-PRE)#215
dustinkirkland wants to merge 1 commit into
kaj:mainfrom
dustinkirkland:fix-rsass-cli-version-bump

Conversation

@dustinkirkland

@dustinkirkland dustinkirkland commented May 29, 2026

Copy link
Copy Markdown

Summary

The rsass-cli sub-crate's Cargo.toml has carried a stale version string ("0.29.1-PRE") through multiple library releases — the root library Cargo.toml has advanced 0.29.00.29.10.29.20.29.3-PRE while rsass-cli stayed at 0.29.1-PRE.

Bump it to 0.29.3-PRE to match.

Why it matters

The practical impact is that the rsass CLI binary's --version output no longer reflects the actual release version. Downstream packagers running version-check tests (e.g. Chainguard's stereo test/tw/ver-check) see drift: the binary reports 0.29.1-PRE while the package was built from the v0.29.2 (or later) source tag.

$ rsass --version
rsass-cli 0.29.1-PRE      # ← what the binary built at v0.29.2 reports

How surfaced

Found by Chainguard's reverse-dependency testing of all 8k+ packages in our distribution

Suggested follow-up (optional, not in this PR)

Consider using workspace-level version inheritance to prevent recurrence:

# In rsass-cli/Cargo.toml:
[package]
version.workspace = true

# In workspace root Cargo.toml, define [workspace.package].version

This would let cli and library version-bump together automatically on each release.

This PR is just the minimal pin-bump to unblock the immediate case. Happy to follow up with the workspace-inheritance refactor if you'd like.

The rsass-cli sub-crate's Cargo.toml has carried a stale version
string ("0.29.1-PRE") through multiple library releases — the root
library Cargo.toml has advanced 0.29.0 -> 0.29.1 -> 0.29.2 -> 0.29.3-PRE
while rsass-cli stayed at 0.29.1-PRE.

The practical impact is that the rsass CLI binary's --version output
no longer reflects the actual release version. Downstream packagers
running version-check tests (e.g. Chainguard's stereo test/tw/ver-check)
see drift: binary reports 0.29.1-PRE while the package was built from
the v0.29.2 (or later) source tag.

Surfaced by reverse-dependency testing at
https://github.com/chainguard-sandbox/rdep-testing — full writeup at
chainguard-dev/stereo#102129.

Long-term fix: consider using workspace-level version inheritance
(`version.workspace = true`) so cli and library can't drift again.
This PR is the minimal pin-bump to unblock the immediate case.

Signed-off-by: Dustin Kirkland <dustin.kirkland@chainguard.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant