Merge pull request #3 from quartiq/feature/audit-update

Updating heapless, adding audit CI check
quartiq · Mar 4, 2021 · d05120c · d05120c
2 parents ea665e3 + fb73192
commit d05120c
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -62,6 +62,15 @@ jobs:
         with:
           command: doc
 
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Cargo Audit
+        uses: actions-rs/audit-check@v1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+
   compile:
     runs-on: ubuntu-latest
     strategy:

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,7 @@
 This document describes the changes to smoltcp-nal between releases.
 
 # Unreleased
+* Upgraded to 0.6.1 of heapless to address security vulnerability
 
 ## Version 0.1.0
 Version 0.1.0 was published on 2021-02-17

diff --git a/Cargo.toml b/Cargo.toml
@@ -10,7 +10,7 @@ categories = ["network-programming", "no-std"]
 repository = "https://github.com/quartiq/smoltcp-nal.git"
 
 [dependencies]
-heapless = "0.5"
+heapless = ">=0.6.1"
 embedded-nal = "0.1"
 
 [dependencies.smoltcp]