Update ouroboros following RUSTSEC-2023-0042 #49
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Thank you for helping out with embedded-graphics-simulator development! Please:
CHANGELOG.md
entry in the Unreleased section under the appropriate heading (Added, Fixed, etc) if your changes affect the public APIrustfmt
on the projectjust build
(Linux/macOS only) and make sure it passes. If you use Windows, check that CI passes once you've opened the PR.PR description
Quick update to
ouroboros
0.15.5
->0.17.2
(latest). RUSTSEC_2023-0042 has flagged versions<0.16.0
as unsound.I can update the other dependencies if you think it's worth doing as part of this PR.
I quickly scanned the CHANGELOG and it doesn't seem like you mark dependency updates (other than
embedded-graphics
) so I did not add this change to the log.(edit) Rust MSRV
It looks CI is failing because
half v2.3.1
requires Rust version>= v1.70.0
. Seeing asjamwaffles
provides thecircleci-embedded-graphics
container with rust version 1.71.1, I've bumped the MSRV to that.