Skip to content

Update phf to 0.10 #300

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Apr 28, 2022
Merged

Update phf to 0.10 #300

merged 2 commits into from
Apr 28, 2022

Conversation

wusyong
Copy link
Member

@wusyong wusyong commented Apr 28, 2022

phf 0.8 still uses rand_core version <0.6.2 which suffer from CVE-2021-27378.
Every crate depends on it will be warned by cargo audit.

@CYBAI
Copy link
Member

CYBAI commented Apr 28, 2022

Should we make a patch version bump of cssparser for this phf upgrade 🤔 ?

@wusyong
Copy link
Member Author

wusyong commented Apr 28, 2022

It would be great if that's so. servo-selector also suffers from it.

@wusyong
Copy link
Member Author

wusyong commented Apr 28, 2022

r? @emilio

@emilio
Copy link
Member

emilio commented Apr 28, 2022

Yeah feel free to bump the minor version as well before landing? r=me either way

@emilio
Copy link
Member

emilio commented Apr 28, 2022

It seems this needs to update the minimum rust version, see the CI jobs. I think that's probably fine, 1.36 is kinda ancient.

@wusyong
Copy link
Member Author

wusyong commented Apr 28, 2022

Do you want to remove them (1.36) or set to the current one?
Edit: I updated to 1.40 which is where non_exhaustive got stable.

@emilio
Copy link
Member

emilio commented Apr 28, 2022

@bors-servo r+

Thanks!

@bors-servo
Copy link
Contributor

📌 Commit 8ef116b has been approved by emilio

@bors-servo
Copy link
Contributor

⌛ Testing commit 8ef116b with merge 8b17f4e...

@bors-servo
Copy link
Contributor

☀️ Test successful - checks-github
Approved by: emilio
Pushing 8b17f4e to master...

@bors-servo bors-servo merged commit 8b17f4e into servo:master Apr 28, 2022
@GPHemsley GPHemsley mentioned this pull request Dec 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants