Release v3.5.0

tomaka · Dec 22, 2021 · 34d3134 · 34d3134
1 parent 772f84a
commit 34d3134
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## Version 3.5
+- Replaced our use of the `brotli2` crate with the alternative pure Rust implementation
+  [`brotli`](https://github.com/dropbox/rust-brotli). This removes Rouille's vulnerability to
+  [RUSTSEC-2021-0131](https://rustsec.org/advisories/RUSTSEC-2021-0131.html), which existed due to `brotli-sys`
+  bundling a vulnerable version of the underlying C library.
+- Unpinned `time-rs` and as a result increased our MSRV to 1.51, we don't have a formal MSRV policy and the ecosystem
+  is making it more and more difficult to support compiler versions more than about 6 months old.
+
 ## Version 3.4
 - Resolved a number of cleanup & refactoring TODOs
 - Correctly identify non-lowercase content types as text (e.g. `text/JSON`

diff --git a/Cargo.toml b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "rouille"
-version = "3.4.0"
+version = "3.5.0"
 authors = ["Pierre Krieger <[email protected]>"]
 license = "MIT/Apache-2.0"
 repository = "https://github.com/tomaka/rouille"