From 228efcb30962e1161918f5c5b7234ad5b40b8d3e Mon Sep 17 00:00:00 2001 From: Adrian Wong Date: Wed, 21 Jun 2023 09:30:10 +1000 Subject: [PATCH] Bump ouroboros dependency Fixes a soundness issue. See: https://rustsec.org/advisories/RUSTSEC-2023-0042.html https://github.com/joshua-maros/ouroboros/issues/88 --- CHANGELOG.md | 6 ++++++ Cargo.toml | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fe0f01d..a853e29 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog], and this project aims to follow [Semantic Versioning]. +## [Unreleased] + +### Changed + +- Bump ouroboros dependency. + ## [0.14.0] - 2023-03-02 ### Added diff --git a/Cargo.toml b/Cargo.toml index 7b45a0b..1b3d1dd 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -29,7 +29,7 @@ lazy_static = "1.4.0" libc = "0.2" log = "0.4" num-traits = "0.2" -ouroboros = "0.15" +ouroboros = "0.17" rustc-hash = "1.1.0" tinyvec = { version = "1", features = ["alloc"] } ucd-trie = "0.1.5"