Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CHIA-660: Bump dependencies to resolve dependabot alerts #560

Merged
merged 1 commit into from
Jun 18, 2024
Merged

Conversation

Rigidity
Copy link
Contributor

@Rigidity Rigidity commented Jun 1, 2024

No description provided.

@Rigidity Rigidity requested a review from arvidn June 1, 2024 13:10
@Rigidity Rigidity changed the title CHIA-660: Bump dependencies CHIA-660: Bump dependencies to resolve dependabot alerts Jun 1, 2024
Copy link

coveralls-official bot commented Jun 1, 2024

Pull Request Test Coverage Report for Build 9417295973

Details

  • 0 of 9 (0.0%) changed or added relevant lines in 2 files are covered.
  • 1 unchanged line in 1 file lost coverage.
  • Overall coverage increased (+0.006%) to 82.878%

Changes Missing Coverage Covered Lines Changed/Added Lines %
crates/chia-ssl/src/lib.rs 0 4 0.0%
crates/chia-ssl/src/ca.rs 0 5 0.0%
Files with Coverage Reduction New Missed Lines %
crates/chia-ssl/src/ca.rs 1 0.0%
Totals Coverage Status
Change from base Build 9417263267: 0.006%
Covered Lines: 11598
Relevant Lines: 13994

💛 - Coveralls

Copy link
Contributor

@arvidn arvidn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

just one question.
Also, does dependabot suggest upgrades whenever they're available, or is there any kind of security audit as well? It makes me a bit nervous to "blindly" upgrade to new versions of our dependencies (without a strong reason to)

crates/chia-ssl/src/ca.rs Show resolved Hide resolved
@Rigidity Rigidity merged commit bf5ccb6 into main Jun 18, 2024
64 checks passed
@Rigidity Rigidity deleted the bump-deps branch June 18, 2024 09:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants