Release Roadmap

[joshlf]

0.8

Definitely include

• Any issues labeled blocking-next-release This issue should be resolved before we release on crates.io
• Support TryFromBytes - conditional conversion analogous to FromBytes #5
• Support KnownLayout trait and custom DSTs #29
• Separate "no UnsafeCell" property into separate Immutable trait; allow FromZeros, FromBytes, and AsBytes on types with UnsafeCells #251
• Audit API naming #871
• Ptr type needs to handle zero-sized types #874
• Accepted risk: Box et al containing UnsafeCells #1358
• Tracking issue for outstanding safety proofs blocking 0.8 #896
• Determine whether it's acceptable to remain pinned to a particular version of syn, or choose a different workaround #1088
• Build failure in v0.8.0-alpha.7 on Cortex M #1086
• Write 0.8 upgrading guide (and maybe write a cargo fix-like tool) #1295
• Do we need to do anything about this? Update reference safety requirements rust-lang/rust#125021
• Make error types usable in more contexts #1297
• Update as necessary based on these changes:
  • reference type safety invariant docs: clarification rust-lang/rust#125043
  • [ptr] Document maximum allocation size rust-lang/rust#116675
  • document guarantee about evaluation of associated consts and const blocks rust-lang/reference#1497
  • offset: allow zero-byte offset on arbitrary pointers rust-lang/rust#117329
  • Decide on zero-sized offsets and memory accesses rust-lang/unsafe-code-guidelines#472 (comment)
• For types which implement Deref, change some methods to associated functions? #210
• Accepted risk: Box et al containing UnsafeCells #1358
• Can we tell cargo-semver-checks to ignore certain items? If so, we can whitelist which things we know we’ve changed since 0.7, be and it make sure we didn’t break anything else
• Decide on our policy regarding whether adding #[deprecated] is an MSRV-breaking change; if we decide that it's not, then we can remove some blockers for 0.8
• Replace Unalign::set with replace or swap (which returns the original)? Strictly more powerful.
• Deprecate FromZeros::new_boxed_slice_zeroed and replace with method which supports slice DSTs?
• Audit our entire API for other changes we should make for 0.8
• Support AsBytes for fields with a size set as a generic constant #1182
• Resolve rust-lang/unsafe-code-guidelines#429 before releasing NoCell for Box<T> where T: Sized
  • Replaced with Accepted risk: Box et al containing UnsafeCells #1358
• Consider making macros into functions which fail via post-monomorphization error. This has the advantage of supporting transmutations in generic contexts, but the downside of the cross-crate post-monomorphization footgun. It's possible that this can't be supported given our MSRV and our desire to support these macros/functions in a const context.
  • Alternatively, we could always use a macro, but use toolchain version detection to either use the current macro logic or, on more recent toolchains, use a generic function
• Remove Into<&[u8]> bound from IntoByteSlice? #1260
• Implement try_transmute! #1018
• Error Handling in 0.8 #1139
• PointerMetadata::size_for_metadata can return size which overflows isize #1158
• Fix cfgs in rustdoc #1055
• Consider compiler-erroring instead of panicking in DST APIs #1149
• Request: Add FromBytes::read_from_prefix_split and read_from_suffix_split #1051
  • Current draft: Also return remaining bytes in FromBytes conversion methods #1059
• Remove Ref constructors which zero bytes? #1134
• transmute_mut! documents looser requirements than what is implemented #1046
• Crate-level docs contain headings which are too indented #998
• Add deprecated polyfill for IntoBytes::as_mut_bytes #986
• Lower MSRV to 1.56 #855
• Remove dependency on byteorder crate, make byteorder type methods const #438
• FromZeroes is misspelt #431
  • Specifically: Rename FromZeroes to FromZeros #430
• Ref<core::cell::Ref<[u8]>, _>::into_ref is unsound #716
• Implement more complete fix for #716 #758
• Ptr type should reason about UnsafeCell overlap #873
• Ensure zerocopy-derive doesn't emit code that assumes a prelude #882
• Implement TryFromBytes::is_bit_valid for Unalign<T> #897
• [ptr] Fix soundness hole in "at least" invariants #909
• derive(FromBytes) should implicitly derive FromZeros and TryFromBytes #925
• Provide derive for deprecated name AsBytes just as we do for FromZeroes
  • [derive] Support deriving deprecated AsBytes #938

Include if we have time

• Refactor module structure
• Support generic pointer framework and generic pointer casts #1183 (at least the non-public-API parts)
• Make as much of zerocopy as possible work in a const context #115
• Reconsider re-export strategy #888
• Require opting in to repr-less types? #358
• Overhaul naming of various functions and methods
  • Add try_ variants to some methods, make existing methods panic #284
  • Consider renaming as_bytes_mut to as_mut_bytes #253
• Consider adding #[must_use] annotation to some types, functions, and macros #188
• Split ByteSlice::split_at into separate trait #1
• impl Clone + Copy for Ref #627
• Confirm that transmuting floats is sound #1121

Non-breaking; do after 0.8 is released

• Implement TryFromBytes for MaybeUninit<T> when T: ?NoCell #893
• Indicate in rustdoc that items are conditionally compiled based on Rust toolchain version #894
• Document support for Unsized types #993

0.9

• Safe transmute

0.10

General API overhaul without changing fundamental analysis. Things like:

• Error reporting (e.g. Ideas for supporting richer error reporting #528)
• How to express which properties are validated statically vs dynamically