Skip to content
This repository has been archived by the owner on Feb 18, 2024. It is now read-only.

Ignored RUSTSEC-2020-0071 and RUSTSEC-2020-0159 #537

Merged
merged 1 commit into from Oct 18, 2021
Merged

Conversation

jorgecarleitao
Copy link
Owner

@jorgecarleitao jorgecarleitao commented Oct 18, 2021

See description on the reasons to ignore. TL;DR: we do not use that feature ("clock") because we do not use local offsets.

The original arrow implementation uses it to cast utf8 to timestamp, but we removed it as part of a refactor to make the cast consistent with the arrow spec (and to not depend on libc ^_^).

@jorgecarleitao jorgecarleitao added the testing PRs that only increase coverage label Oct 18, 2021
@codecov
Copy link

codecov bot commented Oct 18, 2021

Codecov Report

Merging #537 (7017997) into main (fdbaa18) will increase coverage by 0.00%.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #537   +/-   ##
=======================================
  Coverage   81.26%   81.27%           
=======================================
  Files         380      380           
  Lines       23376    23376           
=======================================
+ Hits        18996    18998    +2     
+ Misses       4380     4378    -2     
Impacted Files Coverage Δ
src/io/avro/read/schema.rs 55.95% <0.00%> (+1.19%) ⬆️
src/bitmap/utils/slice_iterator.rs 94.02% <0.00%> (+1.49%) ⬆️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update fdbaa18...7017997. Read the comment docs.

@jorgecarleitao jorgecarleitao merged commit 28acaa0 into main Oct 18, 2021
@jorgecarleitao jorgecarleitao deleted the fix_security branch October 18, 2021 19:34
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
testing PRs that only increase coverage
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant