Just pin dependencies for MSRV builds in CI

Pinning dependencies via Cargo.toml caused annoyance for many users
building with up-to-date Rust versions as this affects the entire
project being build and not just serialport.

The build.yaml for GitHub Actions can serve as a guide on how to pin
dependencies in your project if MSRV is an issue.

The dependency libc was originally introduced just for pinning it as a
subdependency but gets used in tests meanwhile.

Author: sirhcel

.github/workflows/build.yaml

@@ -18,6 +18,9 @@ on:
       toolchain:
         default: stable
         type: string
+      pin-dependencies-for-msrv:
+        default: false
+        type: boolean
       continue-on-error:
         default: false
         type: boolean
@@ -82,6 +85,18 @@ jobs:
       - name: Build | rust-cache
         uses: Swatinem/rust-cache@v2
 
+        # Pin some dependencies (for building with MSRV 1.59.0) just here in CI
+        # and not via Cargo.toml. The latter would enforce them to all users
+        # and not just the ones who want to build with an old Rust release. See
+        # issue https://github.com/serialport/serialport-rs/issues/324.
+      - name: Build | pin certain dependencies
+        if: ${{ inputs.pin-dependencies-for-msrv == true }}
+        run: |
+          cargo update --precise 0.10.0 core-foundation
+          cargo update --precise 0.2.163 libc
+          cargo update --precise 1.0.101 proc-macro2
+          cargo update --precise 1.0.22 unicode-ident
+
       - name: Build | build library (default features)
         run: cargo build --target=${{ inputs.target }}
 

.github/workflows/ci.yaml

@@ -87,6 +87,7 @@ jobs:
       disable_tests: true
       target: aarch64-apple-darwin
       toolchain: "1.59.0"
+      pin-dependencies-for-msrv: true
 
   msrv-arm-linux-androideabi:
     uses: ./.github/workflows/build.yaml
@@ -95,6 +96,7 @@ jobs:
       disable_tests: true
       target: arm-linux-androideabi
       toolchain: "1.59.0"
+      pin-dependencies-for-msrv: true
 
   msrv-x86_64-unknown-freebsd:
     uses: ./.github/workflows/build.yaml
@@ -103,6 +105,7 @@ jobs:
       disable_tests: true
       target: x86_64-unknown-freebsd
       toolchain: "1.59.0"
+      pin-dependencies-for-msrv: true
 
   msrv-x86_64-unknown-linux-gnu:
     uses: ./.github/workflows/build.yaml
@@ -112,6 +115,7 @@ jobs:
       extra_packages: libudev-dev
       target: x86_64-unknown-linux-gnu
       toolchain: "1.59.0"
+      pin-dependencies-for-msrv: true
 
   msrv-x86_64-unknown-linux-musl:
     uses: ./.github/workflows/build.yaml
@@ -121,6 +125,7 @@ jobs:
       extra_packages: gcc-aarch64-linux-gnu
       target: aarch64-unknown-linux-musl
       toolchain: "1.59.0"
+      pin-dependencies-for-msrv: true
 
   msrv-x86_64-pc-windows-msvc:
     uses: ./.github/workflows/build.yaml
@@ -130,6 +135,7 @@ jobs:
       runs_on: windows-2025
       target: x86_64-pc-windows-msvc
       toolchain: "1.59.0"
+      pin-dependencies-for-msrv: true
 
   msrv-x86_64-unknown-netbsd:
     uses: ./.github/workflows/build.yaml
@@ -138,6 +144,7 @@ jobs:
       disable_tests: true
       target: x86_64-unknown-netbsd
       toolchain: "1.59.0"
+      pin-dependencies-for-msrv: true
 
   # --------------------------------------------------------------------------
   # Semantic Versioning

Cargo.toml

@@ -23,8 +23,7 @@ libudev = { version = "0.3.0", optional = true }
 unescaper = "0.1.3"
 
 [target.'cfg(any(target_os = "ios", target_os = "macos"))'.dependencies]
-# TODO: Remove pinning this dependency when we are bumping our MSRV.
-core-foundation = "=0.10.0"
+core-foundation = "0.10.0"
 core-foundation-sys = "0.8.4"
 io-kit-sys = "0.4.0"
 mach2 = "0.4.1"
@@ -49,23 +48,11 @@ cfg-if = "1.0.0"
 scopeguard = "1.1"
 serde = { version = "1.0", features = ["derive"], optional = true }
 
-# TODO: Remove pinning this subdependency when we are bumping our MSRV.
-quote = ">=1, <=1.0.40"
-
 [dev-dependencies]
 assert_hex = "0.4.1"
 clap = { version = "3.1.6", features = ["derive"] }
 envconfig = "0.10.0"
-# TODES Remove pinning this subdependency (of clap) when we are bumping our
-# MSRV (libc raised its MSRV with a patch release 0.2.167 from 1.19.0 to
-# 1.63.0). Trick the resolver into picking a compatible release of libc by
-# adding it as a direct dependency meanwhile.
-libc = ">=0.2.0, <=0.2.163"
-# TODO: Remove pinning this subdependency of clap when we are bumping our MSRV.
-# (There has been an incompatible change with the MSRV of os_str_bytes with
-# 6.6.0) Until then we are tricking the dependency resolver into using a
-# compatible version by adding it as a direct dependency here.
-os_str_bytes = ">=6.0, <6.6.0"
+libc = "0.2.163"
 quickcheck = "1.0.3"
 quickcheck_macros = "1.0.0"
 rstest = { version = "0.12.0", default-features = false }