From a3148cf936949903f0ad0c424b9897d910dd022c Mon Sep 17 00:00:00 2001 From: Spencer Ferris <3319370+spencewenski@users.noreply.github.com> Date: Sat, 26 Oct 2024 22:56:12 -0700 Subject: [PATCH 1/4] chore: Remove resolved advisory from deny ignore list Closes https://github.com/roadster-rs/roadster/issues/447 --- deny.toml | 2 -- 1 file changed, 2 deletions(-) diff --git a/deny.toml b/deny.toml index 5f4c61bf..4d1db5cd 100644 --- a/deny.toml +++ b/deny.toml @@ -71,8 +71,6 @@ feature-depth = 1 # output a note when they are encountered. ignore = [ { id = "RUSTSEC-2024-0370", reason = "Transitive dependency; need other dependencies to resolve first." }, - # Todo: https://github.com/roadster-rs/roadster/issues/447 - Get `config` to fix or migrate to `figment` - { id = "RUSTSEC-2024-0320", reason = "Transitive dependency of `config` crate; only impacts our `config-yaml` feature." }, #"RUSTSEC-0000-0000", #{ id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" }, #"a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish From dac5bd2edd164fc24ae575c71b0e01323854068b Mon Sep 17 00:00:00 2001 From: Spencer Ferris <3319370+spencewenski@users.noreply.github.com> Date: Sun, 27 Oct 2024 01:02:48 -0700 Subject: [PATCH 2/4] Bump MSRV to support config 0.14.1 --- Cargo.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Cargo.toml b/Cargo.toml index 040cc317..88f345e1 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -9,7 +9,7 @@ license = "MIT OR Apache-2.0" keywords = ["web", "framework"] categories = ["web-programming", "web-programming::http-server"] # Determined using `cargo msrv` -- https://github.com/foresterre/cargo-msrv -rust-version = "1.74.1" +rust-version = "1.75.0" # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html From 58c9bd4ac0171f75ddc482a2930f082c0702fca4 Mon Sep 17 00:00:00 2001 From: Spencer Ferris <3319370+spencewenski@users.noreply.github.com> Date: Sun, 27 Oct 2024 01:42:52 -0700 Subject: [PATCH 3/4] Update Cargo.toml --- Cargo.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Cargo.toml b/Cargo.toml index 88f345e1..2cb8c97e 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -35,7 +35,7 @@ config-yml = ["config/yaml"] # Config # We only support `toml` configs currently, and one of the default features (`rust-ini`) pulls in a dependency # that breaks the coverage build on nightly. -config = { version = "0.14.0", default-features = false, features = ["toml", "convert-case"] } +config = { version = "0.14.1", default-features = false, features = ["toml", "convert-case"] } dotenvy = "0.15.5" # Tracing From a859450ff8226b682d7ad3d78c354f49584ded3e Mon Sep 17 00:00:00 2001 From: Spencer Ferris <3319370+spencewenski@users.noreply.github.com> Date: Sun, 27 Oct 2024 12:03:19 -0700 Subject: [PATCH 4/4] Bump msrv again to the correct version --- Cargo.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Cargo.toml b/Cargo.toml index 2cb8c97e..8c811eba 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -9,7 +9,7 @@ license = "MIT OR Apache-2.0" keywords = ["web", "framework"] categories = ["web-programming", "web-programming::http-server"] # Determined using `cargo msrv` -- https://github.com/foresterre/cargo-msrv -rust-version = "1.75.0" +rust-version = "1.77.2" # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html