Cabal-install 3.10.2.0 released

let me add that this version of cabal-install fixes a modest but real security issue, and i’d urge users to upgrade: https://github.com/haskell/security-advisories/blob/main/advisories/hackage/cabal-install/HSEC-2023-0015.md

some repos (such as head.hackage) were not keeping their timestamp.json up to date, and now that cabal-install properly checks this, users may find problems until the repos fix this. in the meantime, the --ignore-expiry flag can be used.

5 Likes