Skip to content

Conversation

@mxinden
Copy link
Member

@mxinden mxinden commented Dec 16, 2020

#1890 reports libp2p-pnet to use an outdated dependency. More specifically salsa20 v0.6.0 instead of v0.7.0. With #1744 Dependabot should detect these outdated dependencies and propose a pull request.

libp2p-pnet (as well as libp2p-deflate) was not part of the workspace list in the root Cargo.toml. By adding libp2p-pnet (as well as libp2p-deflate) to the list Dependabot should now check libp2p-pnet as well.

//CC @elenaf9

@mxinden mxinden merged commit 6d3e2b5 into libp2p:master Dec 16, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants