pin serde to 1.0.171

serde-rs/serde#2538
Be-ing · Aug 19, 2023 · 63138bc · 63138bc
1 parent dccfc2d
commit 63138bc
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/Cargo.toml b/Cargo.toml
@@ -49,5 +49,7 @@ convert_case = "0.6"
 proc-macro2 = "1.0"
 syn = { version = "2.0", features = ["extra-traits", "full"] }
 quote = "1.0"
-serde = { version = "1.0", features = ["derive"] }
+# Prevent downloading and running untrusted and unreproducible executable
+# https://github.com/serde-rs/serde/issues/2538
+serde = { version = "=1.0.171", features = ["derive"] }
 serde_json = "1.0"
diff --git a/tests/basic_cxx_qt/rust/Cargo.toml b/tests/basic_cxx_qt/rust/Cargo.toml
@@ -17,7 +17,7 @@ crate-type = ["staticlib"]
 cxx.workspace = true
 cxx-qt.workspace = true
 cxx-qt-lib.workspace = true
-serde = { version = "1.0", features = ["derive"] }
+serde.workspace = true
 serde_json = "1.0"
 
 [build-dependencies]