i think it's rocket's 6-hour-ago release that depends on pear_codegen "0.0", but they must have changed something important between 0.0.16 and 0.0.17
cargo update fixed it
so someone messed their semver. still the best package manager