Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nightly/audit: Temporary ignore RUSTSEC-2024-0006 #748

Conversation

tgonzalezorlandoarm
Copy link
Member

shlex is currently only being brought by bindgen, which does not use the concerning APIs except for testing.

This needs spiffe to be upgraded to be finally be resolved, which will not happen now.

shlex is currently only being brought by bindgen, which does not use
the concerning APIs except for testing.

This needs spiffe to be upgraded to be finally be resolved, which
will not happen now.

Signed-off-by: Tomás González <[email protected]>
shlex is currently only being brought by bindgen, which does not
use the concerning APIs except for testing.

This needs spiffe to be upgraded to be finally be resolved,
which will not happen before release.

Signed-off-by: Tomás González <[email protected]>
gowthamsk-arm
gowthamsk-arm previously approved these changes Feb 23, 2024
Copy link
Contributor

@gowthamsk-arm gowthamsk-arm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM:)

The current version of ahash has been yanked.

 * Update to the latest, un-yanked version.

Signed-off-by: Tomás González <[email protected]>
remove the import of std::convert::From to solve an "unused"
compilation error.

Signed-off-by: Tomás González <[email protected]>
@tgonzalezorlandoarm tgonzalezorlandoarm merged commit 85eb8c3 into parallaxsecond:main Feb 23, 2024
16 checks passed
@tgonzalezorlandoarm tgonzalezorlandoarm deleted the tg/ignore-shlex-advisory branch March 18, 2024 16:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants