Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Vendor yaml #465

Merged
merged 6 commits into from
Mar 26, 2024
Merged

Vendor yaml #465

merged 6 commits into from
Mar 26, 2024

Conversation

mitsuhiko
Copy link
Owner

@mitsuhiko mitsuhiko commented Mar 26, 2024

Vendor the old rust-yaml crate until a replacement has been found. For discussions about alternatives see #467

Replaces #461

Addresses rustsec/advisory-db#1921

@mitsuhiko mitsuhiko merged commit ece6fc9 into master Mar 26, 2024
10 checks passed
@mitsuhiko mitsuhiko deleted the vendor-yaml branch March 26, 2024 10:08
github-merge-queue bot pushed a commit to near/nearcore that referenced this pull request Mar 26, 2024
…arning (#10880)

Recently `cargo audit` started complaining that the `yaml-rust`
dependency is unmaintained
(#10876). `yaml-rust` is an
indirect dependency that comes from the `insta` crate, so to fix the
warning we must upgrade `insta` to a version that doesn't have this
problem.
The `insta` crate just had a new release which fixes the problem
detected by `cargo audit` (they pasted the whole `yaml-rust` crate into
their tree x.x (mitsuhiko/insta#465)). We can
upgrade to the latest version to get rid of the warning.

Upgrading to the latest version is relatively painless, I just had to
replace `assert_display_snapshot` with `assert_snapshot` because
`assert_display_snapshot` is now deprecated (see
https://github.com/mitsuhiko/insta/blob/8379841b8fde1cbd2fee019a9207ebea3619658f/src/macros.rs#L372)

Fixes: #10876
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant