feat: relax dependencies requirements

[Sytten]

• [x] I have looked for existing issues (including closed) about this

Feature Request

At the moment your dependencies are very strict and almost always to the latest patch version. It would be easier for developers to have more flexibility, especially for v1 dependencies.

Motivation

Library authors should aim to lock only the minor and patch if it absolutely necessary. This allows consumers to update their version at their own pace based on their needs. If all library authors respect that best practice then it is easier for everybody.

Proposal

• Relax v1 dependencies like bytes, anyhow, thiserror, etc. to v1 unless a specific version of a minor is required
• Relax pre-v1 dependencies like futures (0.3) to their minor version unless a patch is necessary

[linear[bot]]

RIG-822 feat: relax dependencies requirements

[joshua-mo-143]

Hi @Sytten, thanks for opening this issue!

I definitely agree although so far we haven't had scope to prioritise this at the moment. I'll have a look into this at some point either this or next week (although given my current schedule... probably this weekend).

[Sytten]

Thanks @joshua-mo-143, I just started playing with rig in a somewhat mature project and it annoyed me a bit, but nothing blocking.

I can push a PR but I dont know all of your codebase and implications.

I would start with the deps of core as a good first step and then move from there.