This repository has been archived by the owner on Sep 21, 2024. It is now read-only.
Update tracing-subscriber when ansi_term alternative is chosen #62
Labels
Chore
Non-user-facing feature
Topic: Security
This issue is related to the security properties of our offering
Comments
cdata
added
Chore
jsantell
added a commit
that referenced
this issue
May 23, 2023
…itive rust dependency alert. Fixes #62
jsantell
added a commit
that referenced
this issue
May 23, 2023
…th existing security advisories. Fixes #62.
jsantell
added a commit
that referenced
this issue
May 24, 2023
…th existing security advisories. Fixes #62.
jsantell
added a commit
that referenced
this issue
May 24, 2023
…th existing security advisories. Fixes #62.
github-project-automation
bot
moved this from 🏔️ Icebox
to 🌱 Done
in Subconscious + Noosphere
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
A security alert has been issued (https://github.com/subconsciousnetwork/noosphere/security/dependabot/2) related to a transitive Rust dependency of ours:
ansi_term. The crate is apparently unmaintained.We inherit a dependency on it through the
tracing-subscribercrate. An alternative will eventually be chosen by them, and then we can inherit the choice. Track tokio-rs/tracing#2282 and update our dependency as the issue is resolved.The text was updated successfully, but these errors were encountered: