Skip to content

chore(deps): drop unused direct memmap2 dependency - #867

Closed
andig wants to merge 1 commit into
yvgude:mainfrom
andig:ponytail/9-remove-unused-memmap2
Closed

chore(deps): drop unused direct memmap2 dependency#867
andig wants to merge 1 commit into
yvgude:mainfrom
andig:ponytail/9-remove-unused-memmap2

Conversation

@andig

@andig andig commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

Found in a /ponytail-audit pass (finding #9).

memmap2 = "0.9" had zero use sites anywhere in rust/src, rust/crates, or rust/tests -- our own code never called it directly.

Note: memmap2 remains in Cargo.lock as a transitive dependency of resvg -> fontconfig-parser (the optional SVG-rendering stack), so this doesn't shrink the compiled dependency tree or build time -- it only removes a dead, unused explicit version pin (cargo already resolves the transitive constraint on its own without our redundant pin).

Test plan

  • cargo build --lib -p lean-ctx -- clean
  • cargo test --lib -p lean-ctx -- 7696 passed, 0 failed

Found in a ponytail-audit pass. `memmap2 = "0.9"` had zero use sites
anywhere in rust/src, rust/crates, or rust/tests -- lean-ctx's own code
never called it directly.

Note: memmap2 remains in Cargo.lock as a transitive dependency of
resvg -> fontconfig-parser (the optional SVG-rendering stack), so this
doesn't shrink the compiled dependency tree or build time -- it only
removes a dead, unused explicit version pin with no benefit (cargo
already resolves the transitive constraint on its own).

cargo build clean; full lib suite 7696 passed, 0 failed.
@andig andig closed this Jul 15, 2026
@github-actions github-actions Bot locked and limited conversation to collaborators Jul 15, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant