Temporary ignore RUSTSEC-2020-0071 (time crate potential segfault). (#…

…1303) Also disabled default features for log4rs, which reduced the number of deps a bit. Co-authored-by: Artem Vitae <[email protected]>
KomodoPlatform · Jun 3, 2022 · c1d46c0 · c1d46c0
1 parent 83cca59
commit c1d46c0
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 54 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/deny.toml b/deny.toml
@@ -49,8 +49,10 @@ notice = "warn"
 # output a note when they are encountered.
 
 # RUSTSEC-2021-0113 is related to metrics-util crate that is not actively used for now despite being still present in deps tree
+# RUSTSEC-2020-0071 is related to time crate, which is used only by chrono in our deps tree, remove when https://github.com/chronotope/chrono/issues/700 is resolved
 ignore = [
-    "RUSTSEC-2021-0113"
+    "RUSTSEC-2021-0113",
+    "RUSTSEC-2020-0071",
     #"RUSTSEC-0000-0000",
 ]
 # Threshold for security vulnerabilities, any vulnerability with a CVSS score

diff --git a/mm2src/common/Cargo.toml b/mm2src/common/Cargo.toml
@@ -84,7 +84,7 @@ hyper = { version = "0.14.11", features = ["client", "http2", "server", "tcp"] }
 # got "invalid certificate: UnknownIssuer" for https://ropsten.infura.io on iOS using default-features
 hyper-rustls = { version = "0.23", default-features = false, features = ["http1", "http2", "webpki-tokio"] }
 libc = { version = "0.2" }
-log4rs = { version = "1.0" }
+log4rs = { version = "1.0", default-features = false, features = ["console_appender", "pattern_encoder"] }
 metrics = { version = "0.12" }
 metrics-runtime = { version = "0.13", default-features = false, features = ["metrics-observer-prometheus"] }
 metrics-core = { version = "0.5" }