Replacement for bincode as a dep?

[nazmulidris]

Given https://git.sr.ht/~stygianentity/bincode:

"...bincode development has officially ceased and will not resume. Version 1.3.3 is considered a complete version of bincode that is not in need of any updates..."

Will syntect use another crate to replace bincode?

syntect/src/dumps.rs

Lines 19 to 24 in f329b32

	#[cfg(feature = "dump-load")]
	use bincode::deserialize_from;
	#[cfg(feature = "dump-create")]
	use bincode::serialize_into;
	use bincode::Result;
	#[cfg(feature = "dump-load")]

[CosmicHorrorDev]

removing dependencies from the public API is an overall goal #512. there are plenty of alternatives to consider in terms of internal use

[cisco211]

For me its not just bincode:

cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 900 security advisories (from C:\Users\Cisco211\.cargo\advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (495 crate dependencies)
Crate:     bincode
Version:   1.3.3
Warning:   unmaintained
Title:     Bincode is unmaintained
Date:      2025-12-16
ID:        RUSTSEC-2025-0141
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0141
Dependency tree:
bincode 1.3.3
└── syntect 5.3.0
    └── egui_extras 0.33.3
        ├── keyring-gui 0.1.0
        │   └── keyring-desktop 0.1.0
        ├── egui_commonmark_backend 0.22.0
        │   └── egui_commonmark 0.22.0
        │       └── keyring-gui 0.1.0
        └── egui_commonmark 0.22.0

Crate:     yaml-rust
Version:   0.4.5
Warning:   unmaintained
Title:     yaml-rust is unmaintained.
Date:      2024-03-20
ID:        RUSTSEC-2024-0320
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0320
Dependency tree:
yaml-rust 0.4.5
└── syntect 5.3.0
    └── egui_extras 0.33.3
        ├── keyring-gui 0.1.0
        │   └── keyring-desktop 0.1.0
        ├── egui_commonmark_backend 0.22.0
        │   └── egui_commonmark 0.22.0
        │       └── keyring-gui 0.1.0
        └── egui_commonmark 0.22.0

warning: 2 allowed warnings found

[CosmicHorrorDev]

YAML is mentioned in

• Replace yaml-rust with yaml-rust2 in order to not be affected by RUSTSEC-2024-0320 #537

unfortunately both are included in the public API, so it's not an easy change