Skip to content

RUST-1403 Remove oldtime feature from chrono dependency #691

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Aug 30, 2022
Merged

RUST-1403 Remove oldtime feature from chrono dependency #691

merged 3 commits into from
Aug 30, 2022

Conversation

oskgo
Copy link
Contributor

@oskgo oskgo commented Jul 9, 2022

Remove oldtime feature from chrono dependency to eliminate a transitive dependency on a deprecated version of the time crate which has a vulnerability.

The issue was found using cargo-audit, which you might want to add to CI.

@bajanam bajanam assigned bajanam and patrickfreed and unassigned bajanam Jul 12, 2022
@bajanam bajanam changed the title Remove oldtime feature from chrono dependency RUST-1403 Remove oldtime feature from chrono dependency Jul 12, 2022
@bajanam bajanam added the tracked-in-jira Ticket filed in Mongo's Jira system label Jul 12, 2022
@kmahar kmahar requested a review from patrickfreed August 9, 2022 18:17
@patrickfreed
Copy link
Contributor

On an unrelated note: there looks to be a bunch of failed tasks where all the tests passed. Should keep an eye on that and see if it comes up on more recent PRs (this is currently based off a pretty old branch).

@patrickfreed patrickfreed merged commit 2c6416d into mongodb:main Aug 30, 2022
@patrickfreed
Copy link
Contributor

Thanks for the contribution!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
tracked-in-jira Ticket filed in Mongo's Jira system
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants