The `proc-macro-error2` is unmaintained (RUSTSEC-2026-0173)

[goofacz]

The validator_derive depends on it. Do you plan to replace that dependency?

The RUSTSEC suggests manyhow or proc-macro2-diagnostics.

[gamma0987]

The RUSTSEC advisory lists manyhow and proc-macro2-diagnostics as alternatives, but both require rewriting how errors are reported in your proc macros. proc-macro-error3 is a maintained fork and drop-in replacement — same API, no code changes beyond the dependency rename, so the switch is minimal and low-risk.

I maintain proc-macro-error3 and use it in my projects, mainly https://github.com/gungraun/gungraun. Would you be open to this switch? I'm happy to submit a PR if that would help.

[jilvin]

Maybe someone can take up the proc-macro-error2 project or use proc-macro-error3 as mentioned by @gamma0987 after some code review?

[gamma0987]

@jilvin Not sure if I understood your comment right but proc-macro-error3 is the successor to proc-macro-error2