Sea-ORM still includes sqlx-mysql dependency even when no mysql feature is enabled

[DenuxPlays]

Description

I've added sea-orm like this:

sea-orm = { version = "1.0.0-rc.2", features = ["sqlx-postgres", "runtime-tokio-rustls", "macros", "mock"] }

And the sqlx-mysql dependency can still be found in the Cargo.lock file:

Steps to Reproduce

1. add sea-orm like mentioned above
2. search for sqlx-mysql in your Cargo.lock file

Expected Behavior

Does not include this as a dependency

Actual Behavior

Includes it...

Reproduces How Often

Always

Workarounds

None known

Reproducible Example

https://github.com/financrr/financrr-app/tree/main/backend

Versions

v1.0.0-rc.2

[tyt2y3]

I am not seeing this behaviour on our repo's examples. May be some crate in the workspace of your repo enabled it?

[DenuxPlays]

I don't think so.
I only communicate to postgres via SeaOrm or SeaMigration.
Also regenerated the lock file.
cargo tree supports this:

[DenuxPlays]

Maybe this has something to do with it?

Shouldn't be sqlx/postgres enough?

[yguenduez]

I also had the same issue with mysql, as cargo audit even reported a security issue on this mysql dependency.
I got rid of it by just disabling the default-features.
(But I also do not use the release candidate now - and use sqlite).

Maybe this helps you (disabling default-features):

sea-orm = { version = "0.12.15", features = ["sqlx-sqlite", "runtime-tokio-rustls", "macros" ], default-features = false }

[SZenglein]

Pretty sure this is a cargo bug. Multiple people have run in to this issue with sqlx in particular. cargo tree will correctly not list sqlx-mysql, but it's still pulled into Cargo.lock, which is read by cargo-audit.

rust-lang/cargo#10801

[sam0x17]

this bug comes back if you add any of the "with-xxxxx" features it seems