mirror of
https://github.com/rust-lang/cargo.git
synced 2025-09-28 11:20:36 +00:00

Several updates to token/index handling. This attempts to tighten up the usage of token/index handling, to prevent accidental leakage of the crates.io token. * Make `registry.index` config a hard error. This was deprecated 4 years ago in #2857, and removing it helps simplify things. * Don't allow both `--index` and `--registry` to be specified at the same time. Otherwise `--index` was being silently ignored. * `registry.token` is not allowed to be used with the `--index` flag. The intent here is to avoid possibly leaking a crates.io token to another host. * Added a warning if source replacement is used and the token is loaded from `registry.token`. Closes #6545