Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Avoid serde_derive blob and ban affected versions via cargo-deny #1046

Merged
merged 1 commit into from
Aug 23, 2023

Conversation

svix-daniel
Copy link
Contributor

@svix-daniel svix-daniel commented Aug 21, 2023

Solves #1042 by updating the version of serde specified in the server's Cargo.toml to ensure serde_derive's version is not affected by the binary blob.

Similarly ensures that all versions of the crate with the blob are banned via cargo-deny.

server/Cargo.lock Outdated Show resolved Hide resolved
@svix-daniel svix-daniel merged commit deacbf3 into main Aug 23, 2023
4 checks passed
@svix-daniel svix-daniel deleted the daniel/serde-blob branch August 23, 2023 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Change serde/serde_derive to >= 1.0.184 to avoid precompiled binaries
3 participants