ci: bump lazy-init for cargo audit#1300

Merged

mergify[bot] merged 2 commits intomasterfrom

pshahi/bump-lazy-init

Jan 19, 2021

Contributor

p-shahi commented Jan 18, 2021 •

edited

Loading

This attempts to fix the failing cargo audit job by updating lazy-init to 0.4.0

error: Vulnerable crates found!

ID:       RUSTSEC-2021-0004
Crate:    lazy-init
Version:  0.3.0
Date:     2021-01-17
URL:      https://rustsec.org/advisories/RUSTSEC-2021-0004
Title:    Missing Send bound for Lazy
Solution:  upgrade to > 0.4.0
Dependency tree:
lazy-init 0.3.0
└── dfx 0.6.18

Prithvi Shahi added 2 commits

January 18, 2021 14:35


          ci: bump lazy-init for cargo audit


          update lock

f5c6eb7

p-shahi requested a review from a user

January 19, 2021 17:47

ghost approved these changes

View reviewed changes

p-shahi added the automerge-squash label

mergify bot merged commit badc9a8 into master

mergify bot deleted the pshahi/bump-lazy-init branch

January 19, 2021 18:27

mergify bot removed the automerge-squash label

p-shahi mentioned this pull request

ci: update lazy-init to 0.5.0 #1303

Merged

dfinity-bot added a commit that referenced this pull request


          build: niv advisory-db: update 6a31ac74 -> e0c20907

bdac0e7

## Changelog for advisory-db:
Branch: main
Commits: [rustsec/advisory-db@6a31ac74...e0c20907](rustsec/advisory-db@6a31ac7...e0c2090)

* [`d8e134f1`](rustsec/advisory-db@d8e134f) Add unmaintained advisory for r2d2-odbc ([RustSec/advisory-db⁠#1150](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1150))
* [`c568a8a3`](rustsec/advisory-db@c568a8a) Fix r2d2_odbc name ([RustSec/advisory-db⁠#1296](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1296))
* [`e4ac884b`](rustsec/advisory-db@e4ac884) Assigned RUSTSEC-2022-0036 to r2d2_odbc ([RustSec/advisory-db⁠#1297](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1297))
* [`259863da`](rustsec/advisory-db@259863d) Add advisories for async-graphql/juniper denial of service issues ([RustSec/advisory-db⁠#1290](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1290))
* [`ec93834e`](rustsec/advisory-db@ec93834) Assigned RUSTSEC-2022-0037 to async-graphql, RUSTSEC-2022-0038 to juniper ([RustSec/advisory-db⁠#1298](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1298))
* [`03872678`](rustsec/advisory-db@0387267) Add unmaintained advisory for odbc ([RustSec/advisory-db⁠#1151](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1151))
* [`a36ba668`](rustsec/advisory-db@a36ba66) Assigned RUSTSEC-2022-0039 to odbc ([RustSec/advisory-db⁠#1299](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1299))
* [`9b48cb22`](rustsec/advisory-db@9b48cb2) sass-rs is deprecated ([RustSec/advisory-db⁠#1228](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1228))
* [`d8dd6280`](rustsec/advisory-db@d8dd628) Assigned RUSTSEC-2021-0136 to sass-rs ([RustSec/advisory-db⁠#1300](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1300))
* [`ff384c3d`](rustsec/advisory-db@ff384c3) Initial advisory for owning_ref unsoundness ([RustSec/advisory-db⁠#1188](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1188))
* [`e0c20907`](rustsec/advisory-db@e0c2090) Assigned RUSTSEC-2022-0040 to owning_ref ([RustSec/advisory-db⁠#1301](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1301))

mergify bot pushed a commit that referenced this pull request


          build: niv advisory-db: update 6a31ac74 -> e0c20907 (#2405)

22e957a

## Changelog for advisory-db:
Branch: main
Commits: [rustsec/advisory-db@6a31ac74...e0c20907](rustsec/advisory-db@6a31ac7...e0c2090)

* [`d8e134f1`](rustsec/advisory-db@d8e134f) Add unmaintained advisory for r2d2-odbc ([RustSec/advisory-db⁠#1150](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1150))
* [`c568a8a3`](rustsec/advisory-db@c568a8a) Fix r2d2_odbc name ([RustSec/advisory-db⁠#1296](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1296))
* [`e4ac884b`](rustsec/advisory-db@e4ac884) Assigned RUSTSEC-2022-0036 to r2d2_odbc ([RustSec/advisory-db⁠#1297](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1297))
* [`259863da`](rustsec/advisory-db@259863d) Add advisories for async-graphql/juniper denial of service issues ([RustSec/advisory-db⁠#1290](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1290))
* [`ec93834e`](rustsec/advisory-db@ec93834) Assigned RUSTSEC-2022-0037 to async-graphql, RUSTSEC-2022-0038 to juniper ([RustSec/advisory-db⁠#1298](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1298))
* [`03872678`](rustsec/advisory-db@0387267) Add unmaintained advisory for odbc ([RustSec/advisory-db⁠#1151](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1151))
* [`a36ba668`](rustsec/advisory-db@a36ba66) Assigned RUSTSEC-2022-0039 to odbc ([RustSec/advisory-db⁠#1299](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1299))
* [`9b48cb22`](rustsec/advisory-db@9b48cb2) sass-rs is deprecated ([RustSec/advisory-db⁠#1228](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1228))
* [`d8dd6280`](rustsec/advisory-db@d8dd628) Assigned RUSTSEC-2021-0136 to sass-rs ([RustSec/advisory-db⁠#1300](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1300))
* [`ff384c3d`](rustsec/advisory-db@ff384c3) Initial advisory for owning_ref unsoundness ([RustSec/advisory-db⁠#1188](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1188))
* [`e0c20907`](rustsec/advisory-db@e0c2090) Assigned RUSTSEC-2022-0040 to owning_ref ([RustSec/advisory-db⁠#1301](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1301))

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet