New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update the chrono crate to get rid of an old time 0.1 dependency #281

Merged

primeos-work merged 1 commit into science-computing:master from primeos-work:chrono-update

Sep 12, 2023

Member

primeos-work commented Sep 11, 2023

Getting rid of the old time 0.1 dependency is desirable as it isn't maintained anymore and triggers security alerts due CVE-2020-26235 0.

The chrono crate finally dropped the dependency on time in version 0.4.30 1.

$ cargo update -p chrono
    Updating crates.io index
    Updating chrono v0.4.28 -> v0.4.30
    Removing time v0.1.45
    Removing wasi v0.10.0+wasi-snapshot-preview1


          Update the chrono crate to get rid of an old time 0.1 dependency

b8e0579

Getting rid of the old time 0.1 dependency is desirable as it isn't
maintained anymore and triggers security alerts due CVE-2020-26235 [0].

The chrono crate finally dropped the dependency on time in version
0.4.30 [1].

[0]: https://github.com/science-computing/butido/security/dependabot/4
[1]: chronotope/chrono#602 (comment)

Signed-off-by: Michael Weiss <michael.weiss@atos.net>

primeos-work added this pull request to the merge queue

Merged via the queue into science-computing:master with commit a41f651

13 checks passed

primeos-work added the security label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels