RUSTSEC-2024-0320: yaml-rust is unmaintained.

[github-actions]

Details
Package	yaml-rust
Version	0.4.5
Warning	unmaintained
URL	rustsec/advisory-db#1921
Patched Versions	n/a

The maintainer seems unreachable.

Many issues and pull requests have been submitted over the years
without any response.

Alternatives

Consider switching to the actively maintained yaml-rust2 fork of the original project:

• yaml-rust2
• yaml-rust2 @ crates.io)

[BobAnkh]

This issue is caused by the crate config-rs, used in rattan-cli. Besides, I find this crate seeking new maintainers (#549), which means new releases containing bug-fix commits may only be available after the successful transfer of repo ownership. For now, I suggest we just turn off the default features and only turn on json and toml.

cc @Centaurus99

[Centaurus99]

This issue is caused by the crate config-rs, used in rattan-cli. Besides, I find this crate seeking new maintainers (#549), which means new releases containing bug-fix commits may only be available after the successful transfer of repo ownership. For now, I suggest we just turn off the default features and only turn on json and toml.

cc @Centaurus99

The json feature is not needed. Now we only enable toml.