PackageTrack
Sign in Get early access

cargo-lock

Self-contained Cargo.lock parser with optional dependency graph analysis

11.1.0 35M downloads/mo #1521 most downloaded on crates.io rustsec/rustsec

What this package is like to depend on

Last release 1 months ago

24 Jul 2026

Release timing varies

gaps range from 2 weeks to 1.3 years

Most releases are documented

notes for 20 of 23 stable releases

3 versions withdrawn

withdrawn after publishing

7 years old

31 releases · first in 2019

3 releases in the last 12 months

see the full history below

Release timeline

31 releases · Sep 2019 to Jul 2026
2020 2021 2022 2023 2024 2025 2026
Release Pre-release Withdrawn

Releases

latest 31
  1. 11.1.0 24 Jul 2026
    Release notes

    What's Changed

    • cargo-lock: fix extra empty line at end of file by @jonremy in #1532
    • cargo-lock: move binary into src/main.rs by @djc in #1633
    • cargo-lock: replace gumdrop with clap by @djc in #1650
    • cargo-lock: bump version to 11.1.0 by @djc in #1653
    Open source →
  2. 11.0.1 19 Jan 2026

    Nothing published for this version

  3. 11.0.0 07 Nov 2025

    Nothing published for this version

  4. 10.1.0 19 Jan 2025
    Release notes

    Fixed

    • Fixed git tags in Cargo.lock not being normalized correctly when using lockfile v4 format (#1298)
    • Increased MSRV to 1.73 to match the requirements of dependencies in Cargo.lock
    Open source →
  5. 10.0.1 25 Oct 2024
    Release notes

    Fixed

    • Remove precise from source IDs during normalization (#1270)
    Open source →
  6. 10.0.0 15 Oct 2024
    Release notes

    Added

    • V4 lockfile support (#1206)

    Changed

    Removed

    • toml dependency from public API (#1226)
    Open source →
  7. 10.0.0-rc.0 09 Oct 2024 pre-release

    Nothing published for this version

  8. 10.0.0-pre.0 30 Jul 2024 pre-release

    Nothing published for this version

  9. 9.0.0 24 Apr 2023
    Release notes

    Added

    • Implement From<Name> for String (#776)
    • Support sparse registry references in Lockfiles (#780)

    Changed

    • Mark SourceKind as #[non_exhaustive] (#793)
    • Use Display for io::ErrorKind; MSRV 1.60 (#794)
    • Bump toml to 0.7 (#800, #805)
    • Improvements to the cargo lock tree subcommand (#860)

    Fixed

    • Source::is_default_registry for sparse index (#859)
    Open source →
  10. 8.0.3 01 Dec 2022
    Release notes

    Fixed

    • Encoding inconsistency when there's only one registry for all packages (#767)
    Open source →
  11. 8.0.2 30 Jun 2022
    Release notes

    Fixed

    • Re-export GitReference (#595)
    • Encode version into V3 lockfiles (#596)
    Open source →
  12. 8.0.1 21 May 2022
    Release notes

    Fixed

    • Dependency source extraction for V2+ lockfiles (#568)
    Open source →
  13. 8.0.0 08 May 2022 withdrawn
    Release notes

    NOTE: yanked due to bug fixed in v8.0.1.

    Added

    • Expose package::SourceKind (#557)

    Changed

    • Flatten API (#558)
    • 2021 edition upgrade; MSRV 1.56 (#559)
    • Refactor error handling (#560)
    Open source →
  14. 7.1.0 23 Apr 2022
    Release notes

    Added

    • SourceId::default() (#536)

    Changed

    • MSRV is now 1.49 (#524)

    Fixed

    • V3 lockfile handling and tests (#535)
    Open source →
  15. 7.0.1 06 Jul 2021
    Release notes

    Changed

    • Bump petgraph dependency from 0.5.1 to 0.6.0 (#396)
    Open source →
  16. 7.0.0 27 May 2021 withdrawn
    Release notes

    Added

    • Support for V3 lockfile format (#363)

    Changed

    • Bump semver to v1.0.0 (#378)
    Open source →
  17. 6.0.1 26 Jan 2021
    Release notes

    Changed

    • Rename default branch to main
    Open source →
  18. 6.0.0 25 Sep 2020
    Release notes
    • Bump semver from 0.10.0 to 0.11.0
    Open source →
  19. 5.0.0 23 Sep 2020
    Release notes
    • CLI: support for listing a single dependency
    • Cargo-compatible serializer
    • CLI: add --dependencies and --sources flags to cargo lock list
    • CLI: implement cargo lock tree without arguments
    • Add dependency::Tree::roots() method
    • CLI: make list the default command
    • Make cli feature non-default
    • WASM support; MSRV 1.41+
    • Bump semver dependency from v0.9 to v0.10
    Open source →
  20. 5.0.0-rc 22 Sep 2020 pre-release

    Nothing published for this version

  21. 4.0.1 23 Jan 2020
    Release notes
    • CLI: fix executable name
    Open source →
  22. 4.0.0 22 Jan 2020 withdrawn
    Release notes

    What's Changed

    Open source →
    Release notes
    • Command line interface
    • Add helper methods for working with checksum metadata
    • Use minified version of Cargo's SourceId type
    • Overhaul encoding: use serde_derive, proper V1/V2 support
    • Add support Cargo.lock patch and root
    • Detect V1 vs V2 Cargo.lock files
    • Update petgraph requirement from 0.4 to 0.5
    • Add package::Checksum
    Open source →
  23. 3.0.0 01 Oct 2019
    Release notes
    • Support [package.dependencies] without versions
    Open source →
  24. 2.0.0 26 Sep 2019
    Release notes
    • Use two-pass dependency tree computation
    • Remove Lockfile::root_package()
    Open source →
  25. 2.0.0-pre 25 Sep 2019 pre-release

    Nothing published for this version

  26. 1.0.0 24 Sep 2019
    Release notes
    • dependency/tree: Render trees to an io::Write
    • metadata: Generalize into Key and Value types
    • Refactor dependency handling
    Open source →
  27. 1.0.0-pre 24 Sep 2019 pre-release

    Nothing published for this version

  28. 0.2.1 21 Sep 2019
    Release notes
    • Allow empty [metadata] in Cargo.lock files
    Open source →
  29. 0.2.0 21 Sep 2019
    Release notes
    • dependency_graph: Move petgraph types into a module
    Open source →
  30. 0.1.0 21 Sep 2019
    Release notes
    • Initial release
    Open source →
  31. 0.0.0 21 Sep 2019

    Nothing published for this version

Every package, every release, already written down.

The archive is open and free. Watching your own project is what we are building next.

Browse the archive