Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pull in fix for unsafe-libyaml security advisory #2812

Merged
merged 1 commit into from
Dec 28, 2023

Conversation

dtolnay
Copy link
Contributor

@dtolnay dtolnay commented Dec 26, 2023

Serde_yaml 0.9.28+ and unsafe-libyaml 0.2.10+ fixes https://rustsec.org/advisories/RUSTSEC-2023-0075.html.

@dtolnay
Copy link
Contributor Author

dtolnay commented Dec 28, 2023

Rebased over #2811 to unbreak CI, and added changelog entry.

(I don't know that a changelog entry is necessary for this kind of PR. Automated dependency update PRs are exempt from the changelog check.)

# dependabot PRs are automerged if CI passes; we shouldn't block these
if: github.actor != 'dependabot[bot]'

@Enselic
Copy link
Collaborator

Enselic commented Dec 28, 2023

I was thinking that you maybe wanted a CHANGELOG entry phrased in a particular way since it was a a RUSTSEC advisory, but I'm fine with the way it looks now. Merging.

Thanks!

@Enselic Enselic merged commit 0acb979 into sharkdp:master Dec 28, 2023
22 checks passed
@dtolnay dtolnay deleted the yaml branch December 28, 2023 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants