Skip to content

chore: ignore humantime unmaintained advisory#4612

Merged
jdx merged 1 commit into
jdx:mainfrom
risu729:allow-humantime-unmaintained
Mar 11, 2025
Merged

chore: ignore humantime unmaintained advisory#4612
jdx merged 1 commit into
jdx:mainfrom
risu729:allow-humantime-unmaintained

Conversation

@risu729

@risu729 risu729 commented Mar 11, 2025

Copy link
Copy Markdown
Contributor

Ignores RUSTSEC-2025-0014 which is added on 10th March.

@jdx jdx merged commit 15a1332 into jdx:main Mar 11, 2025
@risu729 risu729 deleted the allow-humantime-unmaintained branch March 11, 2025 20:54
ldrouard pushed a commit to ldrouard/mise that referenced this pull request Mar 12, 2025
jdx pushed a commit that referenced this pull request Mar 12, 2025
Follow up of #4612. `humantime` crate is now outdated, so migrate to
[jiff](https://crates.io/crates/jiff) instead as `cargo-deny` suggests.

`jiff` is almost compatible with `humantime`, but is not 100% compatible
as documented.

https://docs.rs/jiff/latest/jiff/fmt/friendly/index.html#comparison-with-the-humantime-crate
Notably, `1M` is parsed as `1 month` by `humantime` but cannot be parsed
by `jiff`.

I used `2025-01-01` when converting `Span` to `SignedDuration` since we
need a relative date to convert `months` or `years`, in which the
duration differs depending on dates.

https://docs.rs/jiff/latest/jiff/struct.Span.html#integration-with-stdtimeduration-and-signedduration

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants