-
Notifications
You must be signed in to change notification settings - Fork 94
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
build: Update dependencies with known vulnerabilities #1294
Conversation
* https://rustsec.org/advisories/RUSTSEC-2020-0059 * https://rustsec.org/advisories/RUSTSEC-2020-0060 * https://rustsec.org/advisories/RUSTSEC-2020-0091 * https://rustsec.org/advisories/RUSTSEC-2021-0003 * https://rustsec.org/advisories/RUSTSEC-2021-0023 * https://rustsec.org/advisories/RUSTSEC-2021-0072 * https://rustsec.org/advisories/RUSTSEC-2021-0078 * https://rustsec.org/advisories/RUSTSEC-2021-0079
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fantastic! 😄
@@ -707,31 +707,33 @@ THd+9FBxiHLGXNKhG/FRSyREXEt+NyYIf/0cyByc9tNksat794ddUqnLOg0vwSkv | |||
assert_annotated_snapshot!(data); | |||
} | |||
|
|||
macro_rules! sanitize_credit_card_within_value_test { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
insta
has changed the way it infers snapshot names. Before, it used the thread name from cargo test
, which was set to the function. Since that was too brittle, it now uses the name of the function where insta::assert_*
is called.
To keep the snapshot file names the same, we now use a macro rather than a subfunction.
* master: ref(metrics): Stop logging relative bucket size (#1302) fix(metrics): Rename misnamed aggregator option (#1298) fix(server): Avoid a panic in the Sentry middleware (#1301) build: Update dependencies with known vulnerabilities (#1294) fix(metrics): Stop logging statsd metric per project key (#1295) feat(metrics): Limits on bucketing cost in aggregator [INGEST-1132] (#1287) fix(metrics): Track memory footprint more accurately (#1288) build(deps): Bump dependencies (#1293) feat(aws): Add relay-aws-extension crate which implements AWS extension as an actor (#1277) fix(meta): Update codeowners for the release actions (#1286) feat(metrics): Track memory footprint of metrics buckets (#1284)
Upgrades dependencies in Cargo.lock and direct dependencies that are
marked with CVEs. There are still a few CVEs remaining that cannot be
updated easily as they require more extensive changes in the code base.
Since this PR contains many upgrades, all other dependency upgrades that
may carry code changes are left for a later point.
Fixed errors:
Remaining errors:
Allowed warnings, since these only mark unmaintained crates without known vulnerabilities:
#skip-changelog