Skip to content

Add FIXME for tempdir #126

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 18, 2023
Merged

Conversation

JohnTitor
Copy link
Member

We've received some PRs to replace the tempdir crate with tempfile as the former is unmaintained.
However, we cannot simply replace it due to our MSRV. Precisely speaking, it doesn't break but it needs some CI tweaks and we concluded that it wasn't worth doing so. This FIXME clarifies it.

Signed-off-by: Yuki Okushi jtitor@2k36.org

Signed-off-by: Yuki Okushi <jtitor@2k36.org>
@alexanderkjall
Copy link

tempdir also pulls in the remove_dir_all crate, that has a security vulnerability: https://rustsec.org/advisories/RUSTSEC-2023-0018.html

Since this is a test-only vulnerability I guess it's not very critical, but should maybe be mentioned?

@JohnTitor
Copy link
Member Author

I don't think it's worth doing so as it isn't vulnerable to us in general.

@JohnTitor JohnTitor merged commit 7b29204 into rust-lang:master Apr 18, 2023
@JohnTitor JohnTitor deleted the tempdir-fixme branch April 18, 2023 08:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants