Reduce compilation times by removing duplicate dependencies

[link2xt]

cargo tree -d shows dependencies that are pulled in twice or more because multiple versions of them are required. One example is pgp crate pulling in nom 4, while lettre and imap-proto use nom 5. By updating dependencies or dependencies of dependencies, we can reduce compilation time.

I have opened PR for rPGP that I am going to work on: rpgp/rpgp#78

There are many other duplicate dependencies that seem to be easy to update.

[link2xt]

One of the reason we use many old versions is the reqwest crate. We need to wait for seanmonstar/reqwest#701 to be merged before we can update it, because we use rustls.

[link2xt]

To automate dependency upgrades, we can use https://github.com/marketplace/dependabot-preview

It is an official GitHub bot with Rust support, rustls project already uses it.

[hpk42]

I installed dependabot to deltachat-core-rust to see what it does :)

…

On Sun, Nov 24, 2019 at 03:28 -0800, Alexander Krotov wrote: To automate dependency upgrades, we can use https://github.com/marketplace/dependabot-preview It is an official GitHub bot with Rust support, rustls project already uses it. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: #870 (comment)

[link2xt]

We removed what we could already, not actionable.