fix: use patched versions of metrics and sentry to fix RUSTSEC-2020-0…

…041 temporarily
nervosnetwork · Sep 9, 2020 · 6aaae31 · 6aaae31
1 parent 1453b1a
commit 6aaae31
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 94 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -81,3 +81,10 @@ jemallocator = { version = "0.3.0", features = ["unprefixed_malloc_on_supported_
 default = []
 deadlock_detection = ["ckb-bin/deadlock_detection"]
 profiling = ["jemallocator/profiling", "ckb-bin/profiling"]
+
+[patch.crates-io]
+# Fix RUSTSEC-2020-0041.
+metrics         = { git = "https://github.com/nervosnetwork/metrics-rs", tag = "metrics-runtime-v0.13.1-patch.1" }
+metrics-runtime = { git = "https://github.com/nervosnetwork/metrics-rs", tag = "metrics-runtime-v0.13.1-patch.1" }
+metrics-core    = { git = "https://github.com/nervosnetwork/metrics-rs", tag = "metrics-runtime-v0.13.1-patch.1" }
+sentry      = { git = "https://github.com/nervosnetwork/sentry-rust", tag = "sentry-v0.17.0-patch.1" }