From e89557f1aab36f6a8e589b0912e6687e4763d7e6 Mon Sep 17 00:00:00 2001 From: Lucas Soriano del Pino Date: Fri, 1 Mar 2024 22:15:40 +1100 Subject: [PATCH 1/2] chore(webapp): Bump h2 to version 0.4.2 To fix a vulnerability raised by Dependabot: https://github.com/get10101/10101/security/dependabot/22. --- Cargo.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 846c9b2fe..75d0706fd 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1784,9 +1784,9 @@ dependencies = [ [[package]] name = "h2" -version = "0.4.1" +version = "0.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "991910e35c615d8cab86b5ab04be67e6ad24d2bf5f4f11fdbbed26da999bbeab" +checksum = "31d030e59af851932b72ceebadf4a2b5986dba4c3b99dd2493f8273a0f151943" dependencies = [ "bytes", "fnv", @@ -2046,7 +2046,7 @@ dependencies = [ "bytes", "futures-channel", "futures-util", - "h2 0.4.1", + "h2 0.4.2", "http 1.0.0", "http-body 1.0.0", "httparse", From 5dd8463dfde8e17579ebb6133582134359cf720d Mon Sep 17 00:00:00 2001 From: Lucas Soriano del Pino Date: Fri, 1 Mar 2024 22:17:42 +1100 Subject: [PATCH 2/2] chore: Remove unused lightning-net-tokio patch.crates-io entry With patch 1528483, we vendored `lightning-net-tokio` into our project. Therefore, this entry in the workspace `Cargo.toml` is not needed, and Cargo was warning us about it. --- Cargo.lock | 5 ----- Cargo.toml | 1 - 2 files changed, 6 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 75d0706fd..4abbc8af2 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -5368,8 +5368,3 @@ name = "zeroize" version = "1.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2a0956f1ba7c7909bfb66c2e9e4124ab6f6482560f6628b5aaeba39207c9aad9" - -[[patch.unused]] -name = "lightning-net-tokio" -version = "0.0.117" -source = "git+https://github.com/bonomat/rust-lightning-p2p-derivatives?rev=e49030e#e49030e785408f0fd4da077f63f8101cc0b2436e" diff --git a/Cargo.toml b/Cargo.toml index 8a1279d56..2dab36f1c 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -31,7 +31,6 @@ dlc-trie = { git = "https://github.com/get10101/rust-dlc", rev = "bc31c6167e304d lightning = { git = "https://github.com/bonomat/rust-lightning-p2p-derivatives", rev = "e49030e" } lightning-background-processor = { git = "https://github.com/bonomat/rust-lightning-p2p-derivatives", rev = "e49030e" } lightning-transaction-sync = { git = "https://github.com/bonomat/rust-lightning-p2p-derivatives", rev = "e49030e" } -lightning-net-tokio = { git = "https://github.com/bonomat/rust-lightning-p2p-derivatives", rev = "e49030e" } lightning-persister = { git = "https://github.com/bonomat/rust-lightning-p2p-derivatives", rev = "e49030e" } lightning-rapid-gossip-sync = { git = "https://github.com/bonomat/rust-lightning-p2p-derivatives", rev = "e49030e" }