Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build: Update dependencies with known vulnerabilities #1294

Merged
merged 5 commits into from
Jun 9, 2022

Conversation

jan-auer
Copy link
Member

@jan-auer jan-auer commented Jun 8, 2022

Upgrades dependencies in Cargo.lock and direct dependencies that are
marked with CVEs. There are still a few CVEs remaining that cannot be
updated easily as they require more extensive changes in the code base.

Since this PR contains many upgrades, all other dependency upgrades that
may carry code changes are left for a later point.

Fixed errors:

Remaining errors:

Allowed warnings, since these only mark unmaintained crates without known vulnerabilities:

#skip-changelog

@jan-auer jan-auer self-assigned this Jun 8, 2022
@jan-auer jan-auer marked this pull request as ready for review June 8, 2022 12:24
@jan-auer jan-auer requested a review from a team June 8, 2022 12:24
Copy link
Member

@mdtro mdtro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fantastic! 😄

@jan-auer jan-auer changed the title wip: Cargo audit fixes build: Update dependencies with known vulnerabilities Jun 9, 2022
@@ -707,31 +707,33 @@ THd+9FBxiHLGXNKhG/FRSyREXEt+NyYIf/0cyByc9tNksat794ddUqnLOg0vwSkv
assert_annotated_snapshot!(data);
}

macro_rules! sanitize_credit_card_within_value_test {
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

insta has changed the way it infers snapshot names. Before, it used the thread name from cargo test, which was set to the function. Since that was too brittle, it now uses the name of the function where insta::assert_* is called.

To keep the snapshot file names the same, we now use a macro rather than a subfunction.

@jan-auer jan-auer merged commit 02aa37c into master Jun 9, 2022
@jan-auer jan-auer deleted the ci/cargo-audit branch June 9, 2022 06:16
jan-auer added a commit that referenced this pull request Jun 9, 2022
* master:
  ref(metrics): Stop logging relative bucket size (#1302)
  fix(metrics): Rename misnamed aggregator option (#1298)
  fix(server): Avoid a panic in the Sentry middleware (#1301)
  build: Update dependencies with known vulnerabilities (#1294)
  fix(metrics): Stop logging statsd metric per project key (#1295)
  feat(metrics): Limits on bucketing cost in aggregator [INGEST-1132] (#1287)
  fix(metrics): Track memory footprint more accurately (#1288)
  build(deps): Bump dependencies (#1293)
  feat(aws): Add relay-aws-extension crate which implements AWS extension as an actor (#1277)
  fix(meta): Update codeowners for the release actions (#1286)
  feat(metrics): Track memory footprint of metrics buckets (#1284)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants