Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update lexical dependency #6

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

flavio
Copy link

@flavio flavio commented Sep 18, 2024

Update to latest version of lexical crate, this is required to address the following security advisories:

  • lexical: RUSTSEC-2023-0055
  • lexical-core (a transitive dependency of lexical): RUSTSEC-2023-0086

This fixes #4

Update to latest version of lexical crate, this is required to address
the following security advisories:

- lexical: RUSTSEC-2023-0055
- lexical-core (a transitive dependency of lexical): RUSTSEC-2023-0086

This fixes timothee-haudebourg#4

Signed-off-by: Flavio Castelli <fcastelli@suse.com>
@flavio
Copy link
Author

flavio commented Sep 18, 2024

Sorry about the other formatting changes that I've done. I've a toml formatter configured inside of my environment, I can revert them if you want

@flavio
Copy link
Author

flavio commented Sep 25, 2024

@timothee-haudebourg would you be so kind to accept either this PR or #5 and tag a new release of this crate? 🙏

BTW, if you like I could also create other PRs to introduce more automation like:

  • dependabot: to update dependencies
  • GH actions to:
    • run tests and linters
    • run cargo audit at regular intervals to be aware of vulnerabilities inside of the dependency tree

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

lexical dependency is unsound
1 participant