Auto merge of #2990 - jtgeibel:update/semver, r=pietroalbini

Update to the latest semver

The new release of semver treats `>= 0` the same as the `*` wildcard.
It makes sense that these are equivalent, but this did break 3 tests
and will technically reject syntax in `Cargo.toml` that was previously
accepted.

r? `@ghost`

Author: bors

Cargo.lock

@@ -75,7 +75,7 @@ parse_link_header = "0.2.0"
 rand = "0.7"
 reqwest = { version = "0.10", features = ["blocking", "gzip", "json"] }
 scheduled-thread-pool = "0.2.0"
-semver = { version = "0.10", features = ["diesel", "serde"] }
+semver = { version = "0.11", features = ["diesel", "serde"] }
 sentry = "0.21.0"
 serde = { version = "1.0.0", features = ["derive"] }
 serde_json = "1.0.0"

Cargo.toml

@@ -92,7 +92,7 @@ pub fn add_dependencies(
                 .map_err(|_| cargo_err(&format_args!("no known crate named `{}`", &*dep.name)))?;
             if dep.version_req == semver::VersionReq::parse("*").unwrap() {
                 return Err(cargo_err(
-                    "wildcard (`*`) dependency constraints are not allowed \
+                    "wildcard (`*` or `>= 0`) dependency constraints are not allowed \
                      on crates.io. See https://doc.rust-lang.org/cargo/faq.html#can-\
                      libraries-use--as-a-version-for-their-dependencies for more \
                      information",

src/models/dependency.rs

@@ -190,6 +190,7 @@ fn bad_resp(r: &mut AppResponse) -> Option<Bad> {
     Some(bad)
 }
 
+#[track_caller]
 fn json<T>(r: &mut AppResponse) -> T
 where
     for<'de> T: serde::Deserialize<'de>,

src/tests/all.rs

@@ -15,7 +15,7 @@ impl DependencyBuilder {
             explicit_name_in_toml: None,
             name: name.to_string(),
             registry: None,
-            version_req: u::EncodableCrateVersionReq(semver::VersionReq::parse(">= 0").unwrap()),
+            version_req: u::EncodableCrateVersionReq(semver::VersionReq::parse("> 0").unwrap()),
         }
     }