Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependency updates #23

Merged
merged 2 commits into from
Sep 23, 2023
Merged

Dependency updates #23

merged 2 commits into from
Sep 23, 2023

Conversation

cbs228
Copy link
Owner

@cbs228 cbs228 commented Sep 23, 2023

Upgrade Cargo.lock packages to best-available versions.

  • Adopt an MSRV policy for our library, sameold
  • Replace atty with is-terminal

`atty` is unmaintained and has a low-severity security issue on
Windows [1]. This likely does not impact our project, but we will
replace it with `is-terminal`.

`clap` must be pinned in order to keep compatibility with
Rust 1.68.

References

1. https://rustsec.org/advisories/RUSTSEC-2021-0145
Declare a Minimum Supported Rust Version (MSRV) based on the
output of `cargo msrv`. This is particularly relevant for our
library crate, `sameold`.

CI container images are updated to Rust 1.68. Container images
are only used during the release step.
@cbs228 cbs228 self-assigned this Sep 23, 2023
@cbs228 cbs228 merged commit d4d4eff into develop Sep 23, 2023
10 checks passed
@cbs228 cbs228 deleted the bugfix/dependency_update branch September 23, 2023 01:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant