Merge #3098

3098: chore: ignore RUSTSEC-2020-0071 and upgrade two yanked crates r=quake,driftluo a=yangby-cryptape ### What problem does this PR solve? CI was failed on security audit. Problem Summary: - [RUSTSEC-2020-0071](https://rustsec.org/advisories/RUSTSEC-2020-0071) It difficult to fix that issue in our repository, so we have to wait for upstream to fix that (`chrono`). Just ignore it temporarily. - `digest v0.8.0` is yanked - `pin-project-lite v0.2.4` is yanked ### Check List Tests - No code (skip ci) ### Release note ```release-note Title Only: Include only the PR title in the release note. ``` Co-authored-by: Boyu Yang <[email protected]>
nervosnetwork · Oct 18, 2021 · 45572a8 · 45572a8
2 parents 40877df + 95d9587
commit 45572a8
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 6 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/deny.toml b/deny.toml
@@ -3,7 +3,10 @@ vulnerability = "deny"
 unmaintained = "warn"
 yanked = "deny"
 notice = "deny"
-ignore = []
+ignore = [
+    # TODO Potential segfault in the time crate; waiting for the fix from upstream (chrono)
+    "RUSTSEC-2020-0071"
+]
 
 [licenses]
 unlicensed = "deny"