Merge branch 'main' into tab/deprecate-console-sink

risingwavelabs · Apr 7, 2023 · fe2788a · fe2788a
2 parents abf176e + ba2f6e1
commit fe2788a
Show file tree

Hide file tree

Showing 245 changed files with 7,585 additions and 4,623 deletions.
diff --git a/.cargo/audit.toml b/.cargo/audit.toml
@@ -0,0 +1,12 @@
+# advisory-db has unsolved false positive problem.
+# See https://github.com/rustsec/advisory-db/issues/288#issuecomment-1229186835
+# So we ignore known false positives here.
+[advisories]
+ignore = [
+    # We depends on `chrono`, but not `time`, and `chrono` is not affected by `RUSTSEC-2020-0071`
+    # (see https://github.com/time-rs/time/issues/293#issuecomment-946382614).
+    # 
+    # `chrono` also suffers from a similar vulnerability ([`RUSTSEC-2020-0159`](https://rustsec.org/advisories/RUSTSEC-2020-0159),
+    # but it's already patched in `0.4.20` by rewriting vulnerable C function in Rust).
+    "RUSTSEC-2020-0071",
+]