Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove webpki and bump webpki-roots to v0.25 #117

Merged
merged 1 commit into from
Dec 7, 2023
Merged

Remove webpki and bump webpki-roots to v0.25 #117

merged 1 commit into from
Dec 7, 2023

Conversation

yukibtc
Copy link
Contributor

@yukibtc yukibtc commented Aug 25, 2023

I noticed that webpki dependency is no longer maintained and that has a high severity vulnerability.
This PR remove the webpki dependency and bump webpki-roots to v0.25

@RCasatta
Copy link
Member

ref https://rustsec.org/advisories/RUSTSEC-2023-0052

@notmandatory notmandatory added this to the Release 0.19.0 milestone Nov 8, 2023
notmandatory
notmandatory approved these changes Dec 7, 2023
View reviewed changes
Copy link
Member

@notmandatory notmandatory left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK a331ae8

@notmandatory
Copy link
Member

Thanks for the update, sorry it look so long to ACK.

@notmandatory notmandatory merged commit dacd772 into bitcoindevkit:master Dec 7, 2023
1 check passed
@yukibtc yukibtc deleted the webpki branch December 7, 2023 08:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@notmandatory notmandatory notmandatory approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@yukibtc @RCasatta @notmandatory