Update requirement of `url=2.3.1`

[jeffrey-dot-li]

Update requirement of `url=2.3.1`

[mohe2015]

In my opinion dependencies shouldn't be pinned unless absolutely necessary because they have the potential to break lots of downstream consumers and I also can't update some dependencies because of this.

Couldn't you loosen the restriction but still keep using that version in Cargo.lock and cargo deny would still be fine with that? Otherwise I think adding an exception to your deny config would be a better short term approach.

[algesten]

Hi @jeffrey-dot-li, welcome to ureq!

Doing so is not possible at the moment. See comment here: https://github.com/algesten/ureq/blob/main/Cargo.toml#L44-L47

We would get double versions of the idna dep, and we use cargo deny to disallow multiple versions of the same dependency. I haven't investigated if cookie-store has an open issue for this.

[edmorley]

A new version of cookie_store has been released which resolves the duplicate deps.

I've opened #722 to update to it, plus bump the matching deps.