MirroredRepos/bat
1
0
Fork 0
mirror of https://github.com/sharkdp/bat.git synced 2025-02-20 11:58:45 +00:00
Code Issues Releases Wiki Activity

Lock regex crate at min 1.5.5 for CVE-2022-24713

Browse Source 
Cargo.lock already specifies 1.5.5, but we should also do it in
Cargo.toml.
This commit is contained in:
Martin Nordholts 2022-04-02 20:03:54 +02:00
parent 33a984992b
commit 47e0dc22d2
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@ -6,6 +6,8 @@
## Bugfixes
- Bump `regex` dependency from 1.5.4 to 1.5.5 to fix [CVE-2022-24713](https://blog.rust-lang.org/2022/03/08/cve-2022-24713.html), see #2145, #2139 (@Enselic)
## Other
- Include contents of custom assets `metadata.yaml` in `--diagnostics`. See #2107 (@Enselic)

2
Cargo.toml
View File

@ -63,7 +63,7 @@ clircle = "0.3"
bugreport = { version = "0.4", optional = true }
dirs-next = { version = "2.0.0", optional = true }
grep-cli = { version = "0.1.6", optional = true }
regex = { version = "1.5", optional = true }
regex = { version = "1.5.5", optional = true }
walkdir = { version = "2.0", optional = true }
bytesize = { version = "1.1.0" }