Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update tracing-subscriber when ansi_term alternative is chosen #62

Closed
cdata opened this issue Sep 17, 2022 · 0 comments
Closed

Update tracing-subscriber when ansi_term alternative is chosen #62

cdata opened this issue Sep 17, 2022 · 0 comments
Labels
Chore Non-user-facing feature Topic: Security This issue is related to the security properties of our offering

Comments

@cdata
Copy link
Collaborator

cdata commented Sep 17, 2022

A security alert has been issued (https://github.com/subconsciousnetwork/noosphere/security/dependabot/2) related to a transitive Rust dependency of ours: ansi_term. The crate is apparently unmaintained.

We inherit a dependency on it through the tracing-subscriber crate. An alternative will eventually be chosen by them, and then we can inherit the choice. Track tokio-rs/tracing#2282 and update our dependency as the issue is resolved.
@cdata cdata added Chore Non-user-facing feature Topic: Security This issue is related to the security properties of our offering labels Sep 17, 2022
jsantell added a commit that referenced this issue May 23, 2023
@jsantell
chore: explicitly depend on tracing-subscriber >= 0.3.16 due to trans…
fa2983a 
…itive rust dependency alert. Fixes #62
jsantell added a commit that referenced this issue May 23, 2023
@jsantell
chore: Remove unused dependencies, and update/replace dependencies wi…
3d67ce4 
…th existing security advisories. Fixes #62.
@jsantell jsantell mentioned this issue May 23, 2023
Merged
jsantell added a commit that referenced this issue May 24, 2023
@jsantell
chore: Remove unused dependencies, and update/replace dependencies wi…
6a28b0b 
…th existing security advisories. Fixes #62.
jsantell added a commit that referenced this issue May 24, 2023
@jsantell
chore: Remove unused dependencies, and update/replace dependencies wi…
739de2b 
…th existing security advisories. Fixes #62.
@cdata cdata closed this as completed in 65da3d6 May 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Chore Non-user-facing feature Topic: Security This issue is related to the security properties of our offering
Projects
Subconscious + Noosphere
Status: 🌱 Done
Milestone
No milestone
Development

No branches or pull requests
1 participant
@cdata