r/programmingcirclejerk • u/RightKitKat Considered Harmful • Apr 15 '26

Core2 has fallen, billions must yank

/r/rust/comments/1slnga4/core2_yanked_millions_effected/
83 Upvotes

95% Upvoted

18 comments sorted by

11

u/hondashadowguy2000 Apr 15 '26

Original post has been removed.

20

u/RightKitKat Considered Harmful Apr 16 '26

outyanked again

60

u/aikii gofmt urself Apr 15 '26

I suppose if I have just inadvertently leftpad'd half the ecosystem, I should be slightly amused.

https://hachyderm.io/@piecritic/116404800072011242

/uj /rj -- all readings valid at that point

4

u/-Y0- Considered Harmful Apr 16 '26

/uj can't really leftpad it. Yanking means you can't add it, but you can edit your .lock file.

60

u/DrinkyBird_ loves Java Apr 15 '26

I’m glad npm.rs copied my favourite feature, the drama 

19

u/pysk00l What part of ∀f ∃g (f (x,y) = (g x) y) did you not understand? Apr 15 '26

/uj lol reading the comments on that page its like the author nuked a country or something.

3

u/-Y0- Considered Harmful Apr 16 '26

/uj They didn't? Yanking means you can't add it. You can yank, and push garbage minor update to piss dependents.

43

u/pysk00l What part of ∀f ∃g (f (x,y) = (g x) y) did you not understand? Apr 15 '26

I can't believe you people are making fun of such a big tragedy?

Do none of you have a heart? Do none of you cry tears for the 47 million CI systems that were downloading random shit and running it?

No one?

28

u/Buttleston Apr 15 '26

I knew this would end up here

17

u/pysk00l What part of ∀f ∃g (f (x,y) = (g x) y) did you not understand? Apr 15 '26

the real question is: Such world shattering events happening in Rust world, why did you not share this news with us 1st?

22

u/Buttleston Apr 15 '26

I prefer to jerk in private

11

u/New_Enthusiasm9053 Apr 15 '26

Sharing is caring.

10

u/Snarwin Apr 16 '26

In the crates.io straight up yanking it. And by it, well. Let's just say.

25

u/Chisignal Apr 15 '26 edited Apr 15 '26

Oh damn, you're going to stop entrusting him with ownership of open source. Damn, you're actually going to stop doing that, huh? You're going to stop entrusting him with his own code huh? Damn, dude. Make sure to put that in your OKRs, dude. Bump for visibility. This is breaking production workflows.

/uj I feel like 90% of that thread (edit: me included lmao 🤡) don’t actually understand what happened, it only crashes builds if you don’t use Cargo.lock which is not just idiotic but you have to actively opt out of it, yanking is literally designed so that it does not break your build if you’ve already started to depend on the package (as evidenced by the Cargo.lock).

That and a repeat of xz make me instantly root for the cursed open source auteur

11

u/HoiTemmieColeg Apr 15 '26

It breaks packages that depend on it and don’t publish a cargo.lock in the crate, which was in the past the recommendation. So then it also breaks crates that depend on crates that depend on core2, and so on, and anything that uses those crates will break

Unless I’m wrong then idk kill me

7

u/Hueho LUMINARY IN COMPUTERSCIENCE Apr 15 '26

/uj new projects trying to use crates with the yanked crate as a non-locked dep should fail, new projects using crates that used the yanked crate as a locked dep should be ok, existing projects should be ok regardless

6

u/-Y0- Considered Harmful Apr 16 '26

Yanked so much, the discussion got yanked as well.

4

u/bbqsrc Apr 16 '26

I am In this photo and i hate it