Dependency bumps #5177
drHuangMHT
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Recent test keep failing because
cargo deny
is reporting errors about dependencies. There are warnings about duplicate depencencies, which can be ignored, but there are also errors about security vulnerabilities(looking at you,h2
), which can't be ignored.Also I notice that there are some MAJOR version bumps(
async-io
) and some minor version bump that can be breaking(rustls
). And we're intentionally using two copies ofyamux
.How can we address those problems?
Beta Was this translation helpful? Give feedback.
All reactions