Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps: Update gpiocdev to 0.7 #8

Merged
merged 1 commit into from
May 7, 2024
Merged

deps: Update gpiocdev to 0.7 #8

merged 1 commit into from
May 7, 2024

Conversation

zevweiss
Copy link
Owner

@zevweiss zevweiss commented May 2, 2024

Version 0.4 had a transitive dependency on a version of the 'time' crate that was triggering security alerts (see [1]). It's not a terribly critical problem and I'm pretty sure unlikely to cause us any vulnerabilities or other problems in practice, but the new gpiocdev trims its dependencies to avoid the problem entirely and is hence nicely a bit lighter-weight, so updating seems like a win-win.

[1] time-rs/time#293

Version 0.4 had a transitive dependency on a version of the 'time' crate
that was triggering security alerts (see [1]).  It's not a terribly
critical problem and I'm pretty sure unlikely to cause us any
vulnerabilities or other problems in practice, but the new gpiocdev
trims its dependencies to avoid the problem entirely and is hence nicely
a bit lighter-weight, so updating seems like a win-win.

[1] time-rs/time#293
@zevweiss zevweiss requested a review from ofaurax May 2, 2024 10:07
@zevweiss zevweiss merged commit 3b1a3c9 into master May 7, 2024
@zevweiss zevweiss deleted the crate-dep-update branch May 7, 2024 08:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants