Conill: The long-term consequences of maintainers’ actions

I'm going to write two comments, this one is about a potential way forward and thus maybe is more constructive.

Here's what cryptography currently says about their Rust requirement:

"The current minimum supported Rust version is 1.41.0."

1.41 was released in January 2020, and as I write this it's September 2021 and the current Rust is, I think 1.55. So, although "the Rust ecosystem is rapidly evolving" that's not inherited from cryptography. They are clearly willing to live with a much impoverished older Rust in order to not burden people with constant compiler upgrades. Alpine is choosing not to take advantage of that.

It seems to me that Alpine absolutely *could* pick a Rust version to ship in main, even if they also ship a newer one for community. If it won't do this, it seems a shame to blame cryptography for it, when it is not of their doing. If some exciting new feature in community required some C++ 20 feature and thus a very new GCC that isn't in main, would Alpine now blame all the C programs in Alpine for requiring a C compiler, even though they don't need this very new version?