From 69c7aaee2448abba83b25edbadc13b79f55e6eb9 Mon Sep 17 00:00:00 2001 From: Soc Virnyl Estela Date: Tue, 22 Aug 2023 10:02:22 +0800 Subject: [PATCH] security: unpin serde version. As the consensus was concluded across the rust community, this PR https://github.com/serde-rs/serde/pull/2590 phases out precompiled blobs from serde_derive. Signed-off-by: Soc Virnyl Estela --- rypper-reader/Cargo.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rypper-reader/Cargo.toml b/rypper-reader/Cargo.toml index c768c03..b2a9903 100644 --- a/rypper-reader/Cargo.toml +++ b/rypper-reader/Cargo.toml @@ -25,5 +25,5 @@ md-5 = "0.10" regex = "1.9.1" # Pin to the most recent version before 1.0.172 # https://github.com/serde-rs/serde/issues/2538 is a security risk. -serde = { version = "1.0.171, <1.0.172", features = ["derive", "alloc"] } +serde = { version = ">=1.0.184", features = ["derive", "alloc"] }