Skip to content

chore: remove unmaintained daemonize crate (RUSTSEC-2025-0069)#90

Merged
Jeshua Ben Joseph (Theaxiom) merged 2 commits into
mainfrom
copilot/rustsec-2025-0069-resolve-daemonize-issue
Apr 16, 2026
Merged

chore: remove unmaintained daemonize crate (RUSTSEC-2025-0069)#90
Jeshua Ben Joseph (Theaxiom) merged 2 commits into
mainfrom
copilot/rustsec-2025-0069-resolve-daemonize-issue

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 6, 2026

daemonize v0.5.0 is flagged as unmaintained (RUSTSEC-2025-0069) — no upstream activity since June 2023, issues disabled, maintainer unreachable.

Changes

  • cli/Cargo.toml — Drop daemonize = "0.5" from [target.'cfg(unix)'.dependencies]
  • cli/src/daemon/server.rs — Remove the stale commented-out block referencing daemonize_process()

Notes

No functional replacement needed. The crate was only referenced inside a dead, commented-out block. Actual backgrounding is handled by the CLI spawning a detached child process via std::process::Command with process_group(0) — the daemonize code path was already abandoned due to fork() being unsafe inside a Tokio runtime.

Copilot AI changed the title [WIP] Fix unmaintained status of daemonize package chore: remove unmaintained daemonize crate (RUSTSEC-2025-0069) Apr 6, 2026
@Theaxiom Jeshua Ben Joseph (Theaxiom) marked this pull request as ready for review April 16, 2026 05:09
Copilot AI review requested due to automatic review settings April 16, 2026 05:09
@Theaxiom Jeshua Ben Joseph (Theaxiom) merged commit 4872058 into main Apr 16, 2026
1 check passed
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Removes an unmaintained Rust dependency (daemonize, flagged by RUSTSEC-2025-0069) from the CLI crate and cleans up leftover dead/commented references in the daemon startup code.

Changes:

  • Dropped daemonize = "0.5" from cli’s Unix-only dependencies.
  • Removed a stale commented-out daemonization block from start_daemon().

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
cli/Cargo.toml Removes the daemonize dependency from Unix-specific dependencies.
cli/src/daemon/server.rs Deletes an obsolete commented-out daemonization section.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread cli/Cargo.toml
# Platform-specific daemon support
[target.'cfg(unix)'.dependencies]
daemonize = "0.5"
libc = "0.2"
Copy link

Copilot AI Apr 16, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since CI and release workflows run Cargo with --locked, removing daemonize from this manifest also requires committing the regenerated Cargo.lock. The current lockfile still lists daemonize as a dependency of the aegis-orchestrator package, which will cause cargo * --locked to fail until the lockfile is updated.

Suggested change
libc = "0.2"
libc = "0.2"
daemonize = "0.5"

Copilot uses AI. Check for mistakes.
@Theaxiom Jeshua Ben Joseph (Theaxiom) deleted the copilot/rustsec-2025-0069-resolve-daemonize-issue branch April 16, 2026 05:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RUSTSEC-2025-0069: daemonize is Unmaintained

3 participants